Skip to content
Nigel Metheringham edited this page Nov 29, 2012 · 2 revisions



I see entries in the log that mention two different IP addresses for the same connection. Why is this? For example: ([]) []


The actual IP address from which the call came is the final one. Whenever there's something in parentheses in a host name, it is what the host quoted as the domain part of an SMTP HELO or EHLO command. So in this case, the client, despite being, issued the command


when it sent your server the message. This is, of course, very misleading.