How to view the original client IP from the message header and the transport trace log

Note: If the original client's IP was converted by the F5 load balancing device, then the IP of the original client is the F5 IP address after the conversion.

The first kind: from the client view

For example, Mailuser1 to Mailuser2 sent a message, then you can go to Mailuser2 open the Inbox, open the Received mail, view the message header.

650) this.width=650; "title=" clipboard "style=" border-top:0px;border-right:0px;border-bottom:0px;border-left:0px; " Border= "0" alt= "clipboard" src= "Http://s3.51cto.com/wyfs02/M01/79/BB/wKiom1aZz9HBeMaNAAC48JFHr-8094.png" height= " 268 "/>

Then select the angle brackets to open the message header interface.

650) this.width=650; "title=" clipboard[1] "style=" border-top:0px;border-right:0px;border-bottom:0px;border-left:0 px; "border=" 0 "alt=" clipboard[1] "src=" Http://s3.51cto.com/wyfs02/M02/79/BA/wKioL1aZ0AmRnv_cAAFoxGWGABI415.png " height= "394"/>

In the Internet Mail header mainly look at the X-originating-ip field, this is the original client's IP

Because all of our visits will go to F5 first, so the original client IP is not visible, was F5 converted. This is true even if viewed from the server.

Note that headers can only be viewed from the Inbox, which is not visible from the sent messages.

The second type: from the server to see

In the first step, we can get the IP address of the CAS server that the message passes through, then we'll go to the Cas/hub server's messagetracking log.

Copy the log out, and then open with Excel, Note: The txt dragged directly into Excel, so that the format will not be messy, and then we find the X--originating-ip field, and then filter the title of the message "Test", You can see that the IP is the same as the IP you see from the message header and is converted.

This article from "Zeng Hung Xin Technical column" blog, declined to reprint!

How to view the original client IP from the message header and the transport trace log