Print Page | Close Window

Forward original IP

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=7100
Printed Date: 26 December 2024 at 5:47am


Topic: Forward original IP
Posted By: ecarbone
Subject: Forward original IP
Date Posted: 31 October 2014 at 3:54pm
Is it possible to forward the emails filtered thru SpamFilter using the original IP of the sender instead of SpamFilter-s IP.

We are doing filtering on behalf of our customers; but some of them still have internal filtering solutions and they would like to see the "real" IP who sent the e-mail instead of the IP of our SPAMFilter Server.

Regards,

   Enrique.


-------------
Enrique



Replies:
Posted By: LogSat
Date Posted: 31 October 2014 at 4:19pm
Hi Enrique,

SpamFilter is not a proxy, as when it receives an email that is deemed "clean" it will modify it by adding some headers in it, and then will connect to your destination SMTP server(s) to deliver it. It will then wait before accepting the email from the sender until your SMTP server has fully accepted it, so as to practically eliminate all risk of backscatter. When doing this, SpamFilter is behaving as an actual email client, which requires an established TCP session between your destination SMTP server and the SpamFilter server. In the TCP session your SMTP server must see SpamFilter's true IP, otherwise the SMTP session will never be stablished.


-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP


Posted By: ecarbone
Date Posted: 31 October 2014 at 4:30pm
Is it possible to get from the Mail-Headers the Original sender IP? Which headers to look for?

Regards,

   Enrique

-------------
Enrique


Posted By: LogSat
Date Posted: 31 October 2014 at 5:01pm
Of course - it will be logged in two places. First, SpamFilter adds this "Received" header when it processes an email:

Received: from 66.231.95.252 by mail.netwide.net (SpamFilter ISP); Fri, 31 Oct 2014 13:39:06 -0400


In there it will indicate the IP address of the sender's server that made the connection to SpamFilter. In addition, it will add the following "X-SF-Originating-IP " header with the same IP:

X-SF-Originating-IP: 66.231.95.252




-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP



Print Page | Close Window