On Monday, November 24, 2003 8:59 AM, Michael Havens wrote: > Forgot tosay that I use kmail. > > On Monday 24 November 2003 08:55 am, Michael Havens said: > ~ How does one view the IP address of an email? In Kmail, select the message and then click View -> All Headers. Each server through which a message passes will prepend a Received: header to the message. For example, your message has the following Received headers (with IP addresses modified to protect the innocent): -------------- SNIP -------------- Received: from foo.worldatwork.org ([66.77.88.99]) by bar.worldatwork.org with SMTP id XMNS996J; Mon, 24 Nov 2003 08:51:32 -0700 Received: from pluglist.macrosift.com [68.69.70.71] by foo.worldatwork.org with ESMTP (SMTPD32-8.04) id A9C620B40222; Mon, 24 Nov 2003 09:54:46 -0600 Received: from lists.plug.phoenix.az.us (plug [127.0.0.1]) by pluglist.macrosift.com (Postfix) with ESMTP id 242641A74D6; Mon, 24 Nov 2003 09:30:07 -0700 (MST) Received: from medusa.veiinternet.com (ns3.vei.net [66.55.44.33]) by pluglist.macrosift.com (Postfix) with ESMTP id 9ED471A74D2 for ; Mon, 24 Nov 2003 09:29:04 -0700 (MST) Received: from 1cust88.tnt49.lax3.temp.da.uu.net (unverified [55.66.77.88]) by medusa.veiinternet.com (Vircom SMTPRS 3.0.273) with ESMTP id for ; Mon, 24 Nov 2003 10:53:30 -0500 -------------- SNIP -------------- The Received headers are listed in reverse order, so the first Received header would be your mailserver taking final receipt of the message, and the last Received header would usually* be where the message was originally injected. The other Received headers represent other mailservers through which the message passed on its way to the recipient. So, in this example, the "IP address of your message" appears to be 55.66.77.88. HTH. ~Jeff * I say usually because spammers like to forge things like Received headers to try to obfuscate their identity. Take a look at this: http://www.rahul.net/falk/mailtrack.html or this: http://www.stopspam.org/email/headers/headers.html for more details.