Does the global deny list just check a denied IP by the last sending server? Or does it check all the IP addresses listed in the emails internet header? For instance, I have the following email header where an email is forwarded through a relay: Microsoft Mail Internet Headers Version 2.0 Received: from intimate.net ([60.63.104.96] RDNS failed) by mymail.mydomain.COM with Microsoft SMTPSVC(6.0.3790.211); Fri, 29 Apr 2005 21:33:23 -0700 Received: from godjenta.com (homer.datanerd.no [195.159.29.220]) by intimate.net (Mailfix) with ESMTP id 70D3050679 for dumbuser@mydomain.com; Fri, 29 Apr 2005 21:33:23 -0700 Message-ID: <001101c54d3d$18e11582$169bc5a3@godjenta.com> From: Jana Bernadette To: Jfoscue Subject: Date: Fri, 29 Apr 2005 21:33:23 -0700 MIME-Version: 1.0 As you can see the email is relayed through 60.63.104.96 via 195.159.29.220. Will the global deny list block based on both addresses or just the first address which is initiating the SMTP connection? TIA Charles
