|
|
|
|
|
Every time an e-mail moves through a different mail server, a new Received header line is added to the beginning of the message headers list. It means that as you read the Received headers from top to bottom, you are moving closer to the computer or person that sent you the email. If the header shows more than one Received, there is the possibility that the sender have added one or more false Received header to fool and redirect the recipient to another location or to prevent them from finding the true sender.
Example of a typical email message header
Received:
from mx3po.yahoo.jp (mx3po.yahoo.jp [192.228.128.53])
Date: Thu, 25 Jul 2002 21:29:05 +0800 |
|
|
<xyz_header@yahoo.com.jp>
Message-id: <000a01c233df$40378860$39616acb@oemcomputer> X-MIMEOLE:
Produced By
Microsoft MimeOLE V5.50.4133.2400 Basically, email consist of: (1) The
envelope (1)
Envelope (2)
headers are used by the user agent and each header field contains a
name, followed by a colon, followed by the field value.
User Agent?
A program (ie: Eudora) or editor that
let users create, edit, compose, store and send mails to a mail server,
polls a mail server for mails, download and display mails, as well as using
POP3
to talk to mail servers. (3) Message body is the content of the message from the sender to the recipient and transferred using the DATA command--the headers are sent first, followed by a blank line, followed by the body. Each line transferred using the DATA command must be less than 1000 bytes. The user agent takes what the sender specify as a body, adds some headers and passes the result to the MTA The MTA adds a few headers, adds the envelope and sends the result to another MTA--Message Transfer Agent (MTA) the exchange of mail using TCP/IP is performed by MTA that defines how email messages are transmitted between two users. |
|
![]() |
|
|