Jump to content


  • Content Count

  • Joined

  • Last visited

Community Reputation

0 Neutral

About pbsdis

  • Rank
  1. turetzsr, thanks for leting me know the move. I looked for my original post in 'Mailhost Configuration' and didn't see it, then I checked the posting 'rules' and saw that something like 'help beginners' is the phrase to be avoided, so I thought the post was filtered and deleted. Thanks you all guys for your intuitive replies, I did learn much from them.
  2. Hi, My previous post was deleted due to the 'improper' title that contained 'newbie', I guess :angry: Here is the modified one. I am pasting two email headers that are assumed to be from the same sender and the same system. My questions are: how do I get the original sender's IP address? The last 'received from' point to the IP that seems like from Microsoft (using whois or nslook) hotmail. How can I get information like where (i.e. city) the sender's system is from. You may tell that the headers are from emails from China, I have replaced user IDs with 'replace'. Can I tell that the two headers are from the same sender (without using the sender's email address)? Thanks, PB You forgot, I think, to replace the live.cn sender name in this example the third time it appears. so I did it for you since you wanted to keep them hidden.
  3. Hi, I am brand new to the email headers (not talking about spam), but I would like and need to have some knowledge for it now. I list two email headers below, they are (assumed) from the same sender with the same machine, is this correct and how can I tell that from the headers? BTW, the emails are from China, how can I tell where is the sender's system is? What is the info I should look to find the above items? From =?gb2312?B?zv3B1rjfzd64383e?= Tue May 26 16:15:19 2009 Return-Path: <replaced[at]live.cn> Authentication-Results: mta128.mail.cnb.yahoo.com from=live.cn; domainkeys=neutral (no sig); from=live.cn; dkim=neutral (no sig) Received: from (EHLO blu0-omc3-s29.blu0.hotmail.com) ( by mta128.mail.cnb.yahoo.com with SMTP; Tue, 26 May 2009 16:16:23 +0800 Received: from BLU142-W14 ([]) by blu0-omc3-s29.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959); Tue, 26 May 2009 01:15:20 -0700 Message-ID: <BLU142-W14E5BA21777E0A83388373C4520[at]phx.gbl> Return-Path: replaced[at]live.cn Content-Type: multipart/alternative; boundary="_2e821a2a-bc19-4feb-a1cc-9cb691bfbf08_" From: =?gb2312?B?zv3B1rjfzd64383e?= <replaced[at]live.cn> 查看è”系人资料 To: =?gb2312?B?sc8g0cex8g==?= <replaced[at]yahoo.com.cn> Subject: Date: Tue, 26 May 2009 08:15:19 +0000 Importance: Normal MIME-Version: 1.0 Content-Length: 872 Thanks P.S. I replaced the USER IDs for the sender and receiver.