Forum Discussion
Need clarification around source IP in O365 email headers
I want to understand how O365 shows the source IP and originating country in its email headers. I see two similar headers in the email source - X-MS-Exchange-Organization-OriginalClientIPAddress and ...
X-MS-Exchange-Organization-OriginalClientIPAddress is for identifying and tracking the origin of a message,
and X-MS-Exchange-Organization-ConnectingIP is for indicating the IP address used while the message is traveling between servers.
@TaeYounAnn
Thanks for your swift response.
Could you explain when can they be different ? From what I see, it's the same IP in both the headers in all cases.
Also could you help on my other two questions on the Originating country and reverse DNS lookup ?
Thanks for your swift response.
Could you explain when can they be different ? From what I see, it's the same IP in both the headers in all cases.
Also could you help on my other two questions on the Originating country and reverse DNS lookup ?
- Although their intended purpose requires the two headers to contain different information, in certain Exchange configurations these settings can be configured to return the same IP address.
For example, if your mail server is configured through a firewall, proxy server, or load balancer, the IP address of the incoming connections to the mail server and the mail delivery connection may be the same.
you can use the following command in a command prompt.
nslookup -type=PTR <IP address>