Can anyone tell me about email headers?

ecchi · 2005-09-25, 09:15 AM

I either have a problem that my email address is being spoofed in spam (which is bad) or that someone has hacked the sendmail on my server (which is a lot worse). Can anyone tell me from the following header extract:

Received: (qmail 5181 invoked from network); 25 Sep 2005 09:45:20 -0000
Received: from ex1.exmasters.com (81.31.38.4)
by nfmail.abuse.net with SMTP; 25 Sep 2005 09:45:19 -0000
Received: by ex1.exmasters.com (Postfix, from userid 2427)
id 35C81BC59; Sun, 25 Sep 2005 11:38:56 +0200 (CEST)

If "Received: by ex1.exmasters.com" means the email "passed through" ex1.exmasters or if it means the message originated on a server where "ex1.exmasters" is the DNS address.

Thanks.

2005-09-25, 09:15 AM	#1
ecchi Banned Join Date: Oct 2003 Location: About to be evicted!!!! Posts: 4,082	Can anyone tell me about email headers? I either have a problem that my email address is being spoofed in spam (which is bad) or that someone has hacked the sendmail on my server (which is a lot worse). Can anyone tell me from the following header extract: Received: (qmail 5181 invoked from network); 25 Sep 2005 09:45:20 -0000 Received: from ex1.exmasters.com (81.31.38.4) by nfmail.abuse.net with SMTP; 25 Sep 2005 09:45:19 -0000 Received: by ex1.exmasters.com (Postfix, from userid 2427) id 35C81BC59; Sun, 25 Sep 2005 11:38:56 +0200 (CEST) If "Received: by ex1.exmasters.com" means the email "passed through" ex1.exmasters or if it means the message originated on a server where "ex1.exmasters" is the DNS address. Thanks.