The proof is in the pudding. INSKEEP: The proof is in the pudding, he said. Tim Lowe wrote us all the way from Santiago de Cali, Colombia, and he writes the following: Frank, the proof is not in the pudding. It would be a messy, if not completely silly place to keep it.
Every email message consists of two parts, the body and the header. The header can be thought of as the envelope of the message, containing the address of the sender, the recipient, the subject and other information. The body contains the actual text and the attachments.
If faked header information was inserted by a spammer, different rules must be applied to identify a sender's IP address. The correct IP address will be normally not be contained in the last Received: from line, because information faked by a sender always appears at the bottom of an email header.