Problem solve Get help with specific problems with your technologies, process and projects.

Masking an email's source IP address

Exchange Server security expert Richard Luckett discusses the most commonly used method by spammers to mask their source IP address.

When an email is sent, it attaches an IP address. Can that IP address be modified so when the recipient receives the email, another IP address appears?
Yes, but it is not done by simply editing the email header. The most common way to do this is by using a forwarder. In fact, this method is commonly used by spammers to mask their source IP address. By forwarding email though a list server or another host, the email header will not display the source IP address of the actual sender.

Do you have comments on this Ask the Expert Q&A? Let us know.

Related information from SearchExchange.com:

  • Expert Advice: Track IP address of virus sender's system
  • Expert Advice: Displaying IP address, but not internal data
  • Expert Advice: Informing an infected sender
  • 10 tips in 10 minutes: Phishing exposed
  • Learning Guide: How to fight spam on Exchange Server
  • Reference Center: Spam prevention and management resources
  • Dig Deeper on Exchange Server setup and troubleshooting

    Start the conversation

    Send me notifications when other members comment.

    Please create a username to comment.