Sign up ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I have an email header which is showing the following information, which i believe is faked.

The mail purports to be from a gmail account but I'm not sure if this is the case. Ordinarily you read the headers from the bottom up, which suggests the email came from (a Microsoft server) but then, bizarrely, the top line of the mail looks like there's a parallel journey in from Google.

What could cause the pattern I'm seeing (could be spam as the Google server doesn't seem to exist)?

Received: from ( by ( 

Received: from (unknown []) by (Postfix) 

Received: from mail60-am1 (localhost.localdomain []) by mail60-am1 (MessageSwitch) 

Received: by 
Received: by 
Received: by abc25 

Received: from mail60-am1 (localhost.localdomain [])   by (Postfix) 

Received: from ( by ( 

Received: from (localhost.localdomain  [])   by (Postfix) 

Received: from ( [])    by
share|improve this question

migrated from Feb 15 '12 at 22:14

This question came from our site for professional and enthusiast programmers.

1 Answer 1

While the headers look odd for a variety of reasons, not the least of which is that they're partial headers. It's entirely possible that the e-mail was originally from Microsoft, to a g-mail account, which is forwarded to another e-mail account. This will cause the e-mail to have headers from Microsoft, receiving headers from GMail, sending headers from GMail, and receiving headers for your Organization.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.