为什么收到的电子邮件标题似乎按时间顺序排列不正确? [英] Why do RECEIVED email headers seem to be out of order chronologically?
问题描述
在查看标头时，似乎接收邮件的第二台服务器直到最终标头中报告的传递日期之后才转发该邮件.
When reviewing the headers, it appears that the 2nd server to receive the message didn't relay it until AFTER the reported delivery date in the final header.
在c9mailgw11.amadis.com，报告的时间为22:47:49 -0800(PST).但是，最终服务器BY2PR0401MB0966.namprd04.prod.outlook.com报告的时间为06:46:08 +0000.
At c9mailgw11.amadis.com, the reported time was 22:47:49 -0800 (PST). However, the final server, BY2PR0401MB0966.namprd04.prod.outlook.com, reports the time as 06:46:08 +0000.
差异是否是由于简单的原因引起的，例如amadis继电器上的时钟错误?
Is the discrepancy due to something simple, like a bad clock on the amadis relay?
我写了一个脚本来检测电子邮件的延迟，当我遇到这样的奇怪情况时，从那一跳到下一跳，我得到一个负值，我想了解为什么以这种方式对它们进行排序，看看我是否有办法向前看.
I've written a script that detects email delays, and when I hit an oddity like that I get a negative value from that hop to the next and I want to understand why they are ordered this way to see if I have way to lookahead.
谁能提供见解?
**Received: from BY2PR0401MB0966.namprd04.prod.outlook.com (10.160.64.15) by
CY1PR0401MB0971.namprd04.prod.outlook.com (10.160.160.17) with Microsoft SMTP
Server (TLS) id 15.1.403.16 via Mailbox Transport; Wed, 17 Feb 2016 06:46:08**
+0000
Received: from BN3PR0401CA0023.namprd04.prod.outlook.com (10.162.159.161) by
BY2PR0401MB0966.namprd04.prod.outlook.com (10.160.64.15) with Microsoft SMTP
Server (TLS) id 15.1.409.15; Wed, 17 Feb 2016 06:46:07 +0000
Received: from BN3NAM01FT022.eop-nam01.prod.protection.outlook.com
(2a01:111:f400:7e41::207) by BN3PR0401CA0023.outlook.office365.com
(2a01:111:e400:51d1::33) with Microsoft SMTP Server (TLS) id 15.1.409.15 via
Frontend Transport; Wed, 17 Feb 2016 06:46:07 +0000
Received: from BAY004-MC1F22.hotmail.com (10.152.66.51) by
BN3NAM01FT022.mail.protection.outlook.com (10.152.67.153) with Microsoft SMTP
Server (TLS) id 15.1.409.7 via Frontend Transport; Wed, 17 Feb 2016 06:46:06
+0000
Received: from mail2world.com ([209.67.128.125]) by BAY004-MC1F22.hotmail.com with Microsoft SMTPSVC(7.5.7601.23143);
Tue, 16 Feb 2016 22:46:06 -0800
Received: from mail pickup service by mail2world.com with Microsoft SMTPSVC;
Tue, 16 Feb 2016 22:46:04 -0800
ResentFrom: xxx@xxx.com
Return-Path: xxx@xxx.com
Received: from 216.163.188.203 unverified ([216.163.188.203]) by mwpop05oc.mail2world.com with Mail2World SMTP Server;
Tue, 16 Feb 2016 22:46:01 -0800
**Received: from sender153-mail.zoho.com (unknown [74.201.84.153])
by c9mailgw11.amadis.com (Postfix) with ESMTP id A432C5B996A81
for <xxx@xxx.com>; Tue, 16 Feb 2016 22:47:49 -0800 (PST)**
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=zapps768; d=zoho.com;
h=content-type:mime-version:subject:to:from:date;
b=b6BP/HJmeP+ORBz043y8K0tUFE3u3c8tUZvDSHjfuH0zD84gax1wUlRdYGps/SBd7SnFHYT1Plps
wRQOJoRp6hEMPerW6MSOL9psGWfNel4lnZwdtr7ujnuh54CTTEwV
Received: from [192.168.10.1] (xxx.xxx.net [xx.xx.xx.xx]) by mx.zohomail.com
with SMTPS id 1455691501828999.0688176107503; Tue, 16 Feb 2016 22:45:01 -0800 (PST)
推荐答案
The answer to this question is documented in rfc5321, section 4.4 as follows:
当SMTP服务器收到要传递的邮件或其他邮件
时处理，必须插入跟踪(时间戳"或已接收")
信息内容开头的信息，如
中所述第4.1.1.4节.
When an SMTP server receives a message for delivery or further
processing, it MUST insert trace ("time stamp" or "Received")
information at the beginning of the message content, as discussed in
Section 4.1.1.4.
此行的结构必须如下:
o必须在SMTP环境中提供的FROM子句，应同时包含(1)显示的源主机的名称在EHLO命令中，以及(2)包含IP的地址文字源地址，由TCP连接确定.
o The FROM clause, which MUST be supplied in an SMTP environment, SHOULD contain both (1) the name of the source host as presented in the EHLO command and (2) an address literal containing the IP address of the source, determined from the TCP connection.
o ID子句可以包含RFC 822中建议的"@"，但是这不需要.
o The ID clause MAY contain an "@" as suggested in RFC 822, but this is not required.
o如果出现FOR子句，则它必须只包含一个即使给出了多个RCPT命令，也可以输入.多引发了一些安全问题，已被弃用，请参见7.2.
o If the FOR clause appears, it MUST contain exactly one entry, even when multiple RCPT commands have been given. Multiple s raise some security issues and have been deprecated, see Section 7.2.
Internet邮件程序不得更改或删除已接收:"行先前已添加到邮件标题部分的文件.SMTP
服务器必须在收到的行之前添加邮件；他们一定不能改变现有行的顺序或在其他任何行中插入接收到的行
位置.
An Internet mail program MUST NOT change or delete a Received: line
that was previously added to the message header section. SMTP
servers MUST prepend Received lines to messages; they MUST NOT change
the order of existing lines or insert Received lines in any other
location.
这篇关于为什么收到的电子邮件标题似乎按时间顺序排列不正确?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
