Problem solve Get help with specific problems with your technologies, process and projects.

Masking an email's source IP address

Exchange Server security expert Richard Luckett discusses the most commonly used method by spammers to mask their source IP address.

When an email is sent, it attaches an IP address. Can that IP address be modified so when the recipient receives the email, another IP address appears?
Yes, but it is not done by simply editing the email header. The most common way to do this is by using a forwarder. In fact, this method is commonly used by spammers to mask their source IP address. By forwarding email though a list server or another host, the email header will not display the source IP address of the actual sender.

Do you have comments on this Ask the Expert Q&A? Let us know.

Related information from SearchExchange.com:

  • Expert Advice: Track IP address of virus sender's system
  • Expert Advice: Displaying IP address, but not internal data
  • Expert Advice: Informing an infected sender
  • 10 tips in 10 minutes: Phishing exposed
  • Learning Guide: How to fight spam on Exchange Server
  • Reference Center: Spam prevention and management resources
  • This was last published in July 2006

    Dig Deeper on Spam and virus protection

    Have a question for an expert?

    Please add a title for your question

    Get answers from a TechTarget expert on whatever's puzzling you.

    You will be able to add details on the next page.

    Start the conversation

    Send me notifications when other members comment.

    By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

    Please create a username to comment.