Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

Removing Recieved from in SMTP ?

CasterCaster Member

Is it possible to mask
Received: from

when sending out emails ? i have multiple cluster setupped and the proxy pass is over a ddos protected vps . But when a email is sent it shows the current node .

Using PHPMailer btw.

Comments

  • no thats not possible to hidde.
    why wyou want it tp be hidden?

  • jarjar Patron Provider, Top Host, Veteran
    edited June 2016

    Yes this can be removed by your MTA. I use headers_remove on exim, for example.

    @perryoo11 said:
    why wyou want it tp be hidden?

    To protect backend server IPs when the front end is protected by a reverse proxy (like CloudFlare). Exposing a backend IP can assist attackers in going directly to your server and bypassing front-end protection.

    Thanked by 2raindog308 Caster
  • @jarland said:
    Yes this can be removed by your MTA. I use headers_remove on exim, for example.

    @perryoo11 said:
    why wyou want it tp be hidden?

    To protect backend server IPs when the front end is protected by a reverse proxy (like CloudFlare). Exposing a backend IP can assist attackers in going directly to your server and bypassing front-end protection.

    ok my bad.

  • RazzaRazza Member

    jarland said: Yes this can be removed by your MTA. I use headers_remove on exim, for example.

    What Jarland said works fine, the way you can hide the Received: from depends if your sending the email from the server you trying to hide or if your sending it via a other server.

    If you sending from the server you what to hide could use Amazon Ses or any other transaction email service which remove the Received: from of the server sending the email.

    If you sending via a other server if you got root access to it you can do what jarland says just removed the headers containing your server ip your trying to hide in it

  • jarjar Patron Provider, Top Host, Veteran
    edited June 2016

    Sending via MXroute also strips the backend server IP now days. Just tossing that out there :P

    Thanked by 1Brannin
  • raindog308raindog308 Administrator, Veteran

    jarland said: To protect backend server IPs when the front end is protected by a reverse proxy (like CloudFlare). Exposing a backend IP can assist attackers in going directly to your server and bypassing front-end protection.

    Interesting...that had never occurred to me. I have all my VPSes (and home PCs) email out through a set of VMs serving as relays, mainly to get around Comcast's "no SMTP from our residential IPs" restrictions and keep RBL monitoring to a minimum.

    But it had never occurred to me that someone might examine Received headers...hmmm...

  • RazzaRazza Member
    edited June 2016

    raindog308 said: But it had never occurred to me that someone might examine Received headers...hmmm...

    I wouldn't worry too much unless your wanting to hide the origin of the email sent via your relay, i run my own mail server too, i don't bother removing the received headers i don't care if someone look's at the header's and see my home or mobile carrier ip address

Sign In or Register to comment.