|Subject:||Why do I see my router's IP address in every log?|
|Creation date:||5/10/19 9:13 AM|
|Last modified on:||1/17/22 10:04 AM|
When you run any server, HTTP, POP3, IMAP or SMTP, Xeams gets the IP addresses of the connecting client from TCP/IP headers. Consider the image below:
In this above example, two different clients are connecting from the Internet. One is using an IMAP (184.108.40.206) and second is another SMTP server (220.127.116.11) trying to send an email. Although both of these clients are coming in from the Internet and have different IP addresses, you see 192.168.1.1, which is your router's IP address in every log, giving you an impression that your router is actually sending these messages. In some cases you may see the WAN IP address of your router instead of 192.168.1.1.
This happens because your router is masquerading the actual client's IP address and is acting sort of like a reverse proxy. To prevent this, refer to your router's documentation to see how to disable this feature. For example, click here to see how to prevent this if you're using a firewall from Fortinet.
There are several disadvantages if your router hides the actual IP address: