Q

Masking an email's source IP address

Exchange Server security expert Richard Luckett discusses the most commonly used method by spammers to mask their source IP address.

When an email is sent, it attaches an IP address. Can that IP address be modified so when the recipient receives the email, another IP address appears?
Yes, but it is not done by simply editing the email header. The most common way to do this is by using a forwarder. In fact, this method is commonly used by spammers to mask their source IP address. By forwarding email though a list server or another host, the email header will not display the source IP address of the actual sender.

Do you have comments on this Ask the Expert Q&A? Let us know.

Related information from SearchExchange.com:

  • Expert Advice: Track IP address of virus sender's system
  • Expert Advice: Displaying IP address, but not internal data
  • Expert Advice: Informing an infected sender
  • 10 tips in 10 minutes: Phishing exposed
  • Learning Guide: How to fight spam on Exchange Server
  • Reference Center: Spam prevention and management resources
  • This was first published in July 2006

    Dig deeper on Spam and virus protection

    Pro+

    Features

    Enjoy the benefits of Pro+ membership, learn more and join.

    Have a question for an expert?

    Please add a title for your question

    Get answers from a TechTarget expert on whatever's puzzling you.

    You will be able to add details on the next page.

    0 comments

    Oldest 

    Forgot Password?

    No problem! Submit your e-mail address below. We'll send you an email containing your password.

    Your password has been sent to:

    SearchWindowsServer

    SearchEnterpriseDesktop

    SearchCloudComputing

    SearchSQLServer

    Close