IP

On Monday, November 24, 2003 8:59 AM, Michael Havens wrote:

> Forgot tosay that I use kmail.
>
> On Monday 24 November 2003 08:55 am, Michael Havens said:
> ~ How does one view the IP address of an email?

In Kmail, select the message and then click View -> All Headers. Each
server through which a message passes will prepend a Received: header to the
message. For example, your message has the following Received headers (with
IP addresses modified to protect the innocent):

-------------- SNIP --------------

Received: from foo.worldatwork.org ([66.77.88.99]) by bar.worldatwork.org
with SMTP
id XMNS996J; Mon, 24 Nov 2003 08:51:32 -0700

Received: from pluglist.macrosift.com [68.69.70.71] by foo.worldatwork.org
with ESMTP
(SMTPD32-8.04) id A9C620B40222; Mon, 24 Nov 2003 09:54:46 -0600

Received: from lists.plug.phoenix.az.us (plug [127.0.0.1])
by pluglist.macrosift.com (Postfix) with ESMTP
id 242641A74D6; Mon, 24 Nov 2003 09:30:07 -0700 (MST)

Received: from medusa.veiinternet.com (ns3.vei.net [66.55.44.33])
by pluglist.macrosift.com (Postfix) with ESMTP id 9ED471A74D2
for <plug-discuss@lists.plug.phoenix.az.us>; Mon, 24 Nov 2003
09:29:04 -0700 (MST)

Received: from 1cust88.tnt49.lax3.temp.da.uu.net (unverified [55.66.77.88])
by medusa.veiinternet.com
(Vircom SMTPRS 3.0.273) with ESMTP id <B0014373003@medusa.veiinternet.com>
for <plug-discuss@lists.plug.phoenix.az.us>; Mon, 24 Nov 2003 10:53:30 -0500

-------------- SNIP --------------

The Received headers are listed in reverse order, so the first Received
header would be your mailserver taking final receipt of the message, and the
last Received header would usually* be where the message was originally
injected. The other Received headers represent other mailservers through
which the message passed on its way to the recipient. So, in this example,
the "IP address of your message" appears to be 55.66.77.88.

HTH.

~Jeff

* I say usually because spammers like to forge things like Received headers
to try to obfuscate their identity. Take a look at this:
http://www.rahul.net/falk/mailtrack.html or this:
http://www.stopspam.org/email/headers/headers.html for more details.