When I display full headers in received emails, how do I tell which IP address the computer was using when the email was sent? There are several different IP addresses listed after "Received."
by 
Anonymous
ANSWERS: 3
-
It probably depends on the internet service you are using. I don't know why there would be 2 IP addresses though, perhaps it is because the sender was on a private network and the second ip was the ip of the computer on the private network and the first was the ip of the network in terms of the internet. Thats my guess
-
I did this for a living for several years. Use the first Received: line for X400 email (SMTP), as long as it is legitimate domain space (not reserved local space like 10.* or 192.*), in which case use the next Received: line and check that the address is legitimate with whois/whos.
-
maddock's pretty much right except for X.400 being SMTP. As with most ISO standards dealing with application-level networking, X.400 failed to compete successfully with SMTP, the Internet-based equivalent. Lookup "The Battle Between SMTP and X.400"
RELATED QUESTIONS
Copyright 2023, Wired Ivy, LLC