Ok, here's how I'm going to break it down. First, I'll remove all data not essential for email tracking. What's left is:
Quote:
Return-Path: <xxxxxx@mac.com>
Received: from mwinf3103.me.freeserve.com (mwinf3103.me.freeserve.com)
by mwinb3406 (SMTP Server) with LMTP; Sun, 03 Jun 2007 21:22:45 +0200
X-Sieve: Server Sieve 2.2
Envelope-to: Graeme@stickings90.freeserve.co.uk
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3103.me.freeserve.com (SMTP Server) with ESMTP id 0F4DE1C02CA9
for <Graeme@stickings90.freeserve.co.uk>; Sun, 3 Jun 2007 21:22:45 +0200 (CEST)
Received: from smtpout.mac.com (smtpout.mac.com [17.250.248.174])
by mwinf3103.me.freeserve.com (SMTP Server) with ESMTP id E5ED31C02CB3
for <Graeme@stickings90.freeserve.co.uk>; Sun, 3 Jun 2007 21:22:18 +0200 (CEST)
X-ME-UUID: 20070603192218941.E5ED31C02CB3@mwinf...reese rve.com
Received: from mac.com (smtpin08-en2 [10.13.10.153])
by smtpout.mac.com (Xserve/smtpout04/MantshX 4.0) with ESMTP id l53JMGsw026877
for <Graeme@stickings90.freeserve.co.uk>; Sun, 3 Jun 2007 12:22:16 -0700 (PDT)
Received: from [10.232.123.87] ([17.255.241.238])
(authenticated bits=0)
by mac.com (Xserve/smtpin08/MantshX 4.0) with ESMTP id l53JLsoW026381
(version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO)
for <Graeme@stickings90.freeserve.co.uk>; Sun, 3 Jun 2007 12:21:56 -0700 (PDT)
To: Graeme@stickings90.freeserve.co.uk
Message-Id: <1AF05A57-9252-45E4-B2AC-DB64CD777EAC@mac.com>
From: Name withheld <xxxxxx@mac.com>
Date: Mon, 26 Mar 2007 18:01:55 -0500
|
Now, headers are tacked on in reverse chronological order. So let's seperate, resort, and explain:
Quote:
X-Mailer: Apple Mail (2.752.3)
X-Brightmail-Tracker: AAAAAA==
X-Brightmail-scanned: yes
X-me-spamlevel: not-spam
X-me-spamrating: 10.349198
|
This is just your SMTP server evaluating whether or not your email is spam by score. "Brightmail" has given your email a score of 10.34, which means it doesn't consider it spam. This kind of rating tells me this system uses banyesian training to adjust its filter.
Quote:
Mime-Version: 1.0 (Apple Message framework v752.3)
To: Graeme@stickings90.freeserve.co.uk
Message-Id: <1AF05A57-9252-45E4-B2AC-DB64CD777EAC@mac.com>
Content-Type: multipart/mixed; boundary=Apple-Mail-3--925580171
From: Name withheld <xxxxxx@mac.com>
Subject: Youth Night Pictures
Date: Mon, 26 Mar 2007 18:01:55 -0500
|
Who sent the email to whom, and when.
Quote:
Received: from [10.232.123.87] ([17.255.241.238])
(authenticated bits=0)
by mac.com (Xserve/smtpin08/MantshX 4.0) with ESMTP id l53JLsoW026381
(version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO)
for <Graeme@stickings90.freeserve.co.uk>; Sun, 3 Jun 2007 12:21:56 -0700 (PDT)
Received: from mac.com (smtpin08-en2 [10.13.10.153])
by smtpout.mac.com (Xserve/smtpout04/MantshX 4.0) with ESMTP id l53JMGsw026877
for <Graeme@stickings90.freeserve.co.uk>; Sun, 3 Jun 2007 12:22:16 -0700 (PDT)
Received: from smtpout.mac.com (smtpout.mac.com [17.250.248.174])
by mwinf3103.me.freeserve.com (SMTP Server) with ESMTP id E5ED31C02CB3
for <Graeme@stickings90.freeserve.co.uk>; Sun, 3 Jun 2007 21:22:18 +0200 (CEST)
X-ME-UUID: 20070603192218941.E5ED31C02CB3@mwinf...reese rve.com
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3103.me.freeserve.com (SMTP Server) with ESMTP id 0F4DE1C02CA9
for <Graeme@stickings90.freeserve.co.uk>; Sun, 3 Jun 2007 21:22:45 +0200 (CEST)
Received: from mwinf3103.me.freeserve.com (mwinf3103.me.freeserve.com)
by mwinb3406 (SMTP Server) with LMTP; Sun, 03 Jun 2007 21:22:45 +0200
X-Sieve: Server Sieve 2.2
Envelope-to: Graeme@stickings90.freeserve.co.uk
Return-Path: <xxxxxx@mac.com>
|
Now here is the "nitty gritty". You created the email and hit send at 6:01:55pm on the 26th of March. The first external machine to get it was "mac.com" on Sunday, June 3rd at 12:21:56 in its time zone. From there it went to smtpout.mac.com at 12:22:16, then off to mwinf3103.me.freeserve.com at 21:22:18 (different time zone, elapsed time was 2 seconds). It added a second entry for itself again 27 seconds later, most likely after putting it in a different queue. It seems that this server is the one physically hosting your friends' email address, and exactly 0 seconds later, put the final entry in the header to say the email was delivered.