following is the header of a message forwarded to me. Can you tell me if the X-Originating-IP is that of the person who forwarded this message, or of person that originally sent the message to the person who forwarded to me? Thanks FORWARDED MESSAGE HEADER: X-Apparently-To: xxx@yahoo.com via 209.191.85.70; Wed, 16 Apr 2008 02:30:04 -0700 X-Originating-IP: [64.135.83.26] Authentication-Results: mta154.mail.re4.yahoo.com from=inbox.com; domainkeys=neutral (no sig) Received: from 64.135.83.26 (HELO WM26.inbox.com) (64.135.83.26) by mta154.mail.re4.yahoo.com with SMTP; Wed, 16 Apr 2008 02:30:04 -0700 Received: from inbox.com (127.0.0.1:25) by inbox.com with [InBox.Com SMTP Server] id <804160001246.WM26> for <xxx@yahoo.com> from <xxx@inbox.com>; Wed, 16 Apr 2008 1:29:58 AM -0800 Mime-Version: 1.0 Date: Wed, 16 Apr 2008 01:29:58 -0800 From: xxx@inbox.com> Subject: hello To: xxx@gmail.com, xxx@hotmail.com, xxx@hotmail.com, xxx@yahoo.com X-Mailer: INBOX.COM X-Originating-IP: 81.83.0.42 Content-Type: text/plain; charset=US-ASCII

This was the header of the message written to me with the above forward header information attached. Didn't include it before. Hope it helps: Return-Path: <xxx@yahoo.com> Received: from [xxx.168.200.78] (HELO mailsf6.ag.org) by webmail.agmail.org (CommuniGate Pro SMTP 5.1.9) with ESMTPS id 25917285 for xxx@agmd.org; Wed, 16 Apr 2008 05:08:51 -0500 Received: from mailsf6.ag.org (localhost.localdomain [127.0.0.1]) by mailsf6.ag.org (8.13.1/8.13.1) with SMTP id m3GA8dCL010357 for <xxx@agmd.org>; Wed, 16 Apr 2008 05:08:39 - 0500 Received: from web36906.mail.mud.yahoo.com (web36906.mail.mud.yahoo.com [209.191.85.74]) by mailsf6.ag.org (mailsf6.ag.org [192.168.200.77]) id k3F58d1410143290xz ret-id none; Wed, 16 Apr 2008 05:08:42 -0500 Received: (qmail 82946 invoked by uid 60001); 16 Apr 2008 10:08:39 -0000 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; Received: from [81.83.0.42] by web36906.mail.mud.yahoo.com via HTTP; Wed, 16 Apr 2008 03:08:39 PDT Date: Wed, 16 Apr 2008 03:08:39 -0700 (PDT) From: xxx@yahoo.com> Subject: Fwd: hello To: xxx@agmd.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="0- 973827559-1208340519=:81970" Content-Transfer-Encoding: 8bit Message-ID: <EMEW- k3F58d3d4a24d67a732a5c2d9f7da287628be2- 60951.81970.qm@web36906.mail.mud.yahoo.com> Received-SPF: None; receiver=mailsf6.ag.org; client- ip=209.191.85.74; helo=<web36906.mail.mud.yahoo.com> Received-SPF: None; receiver=mailsf6.ag.org; client- ip=209.191.85.74; envelope-from=<xxx@yahoo.com> X-ag-org-MailScanner-Information: Please contact the ISP for more information X-ag-org-MailScanner: Found to be clean X-ag-org-MailScanner-SpamCheck: not spam, SpamAssassin (score=-2.598, required 3.5, autolearn=not spam, BAYES_00 -2.60, HTML_MESSAGE 0.00) X-ag-org-MailScanner-From: xxx@yahoo.com