Re: [exim] Hide sender address in Received header

Top Page
Delete this message
Reply to this message
Author: Jon Gerdes
Date:  
To: exim-users@exim.org
Subject: Re: [exim] Hide sender address in Received header
On Tue, 2015-07-07 at 01:12 +0000, Phil Pennock wrote:
> On 2015-07-05 at 18:46 +0200, hb_exim@??? wrote:
> > As a solution I tried is to change the received header by exim. There is the
> > configuration option received_header_text . I want to change it. But exim
> > complains >>option "received_header_text" unknown<<.
>
> The Exim configuration file is divided into sections, delimited by lines
> which start with the `begin` keyword.
>
> The `received_header_text` option is a main section option, which needs
> to go before the first `begin` line.
>
> For myself, I have this:
> ----------------------------8< cut here >8------------------------------
> # We don't want software or version
> # We don't want the intended recipient
> # We don't want the sender_ident
> # We don't want to leak HELO from internal networks with Thunderbird using
> # its local IP as HELO, so we trim the results further for authenticated.
> received_header_text = "Received: \
>         ${if def:authenticated_id {from authenticated user }{\
>         ${if def:sender_rcvhost {from $sender_rcvhost\
>         ${if def:sender_helo_name { (helo=$sender_helo_name)}}\n\t}}}}\
>         by ${primary_hostname} \
>         ${if def:received_protocol {with $received_protocol}} \
>         ${if def:tls_cipher {($tls_cipher)}}\
>         \n\tid $message_exim_id"
> ----------------------------8< cut here >8------------------------------
>
> but that hasn't been touched in a few years and there are interesting
> things from newer features that might be worth adding.
>
> -Phil
>



You can also manipulate the headers at the transport:

begin transports

....

smtp_ext:
  driver           = smtp
  headers_remove   = X-SA-Do-Not-Run: \
                     X-SA-Exim-Scanned: \
                     X-SA-Exim-Mail-From: \
                     X-SA-Exim-Rcpt-To: \
                     X-SA-Exim-Connect-IP: \
                     X-Mailer: \
                     X-MS-Has-Attach: \
                     X-MS-TNEF-Correlator: \
                     x-originating-ip: \
                     x-exclaimer-md-config: \
                     Received:

Removing Received: as above will remove all your internal "processing"
and is probably a violation of the RFCs but it will make your outbound
email appear to originate at your MTA.  You still have message ids etc
for internal tracing but wont expose your internals to they world.

Cheers
Jon




Blueloop Ltd
01460 271055
https://www.blueloop.net
Blueloop House, Ilchester Road, YEOVIL, BA21 3AA Registered England & Wales - 3981322