Re: [Evolution] Bug 738247 - unwanted information disclosure in message headers

[Berend De Schouwer <berend de schouwer gmail com>]

On Fri, 2017-09-29 at 17:06 -0400, d18jf98rw use startmail com wrote:
>  
> On Thursday, September 28, 2017 3:13 AM, Pete Biggs <pete biggs org.u
> k> wrote:
>  
>
> > ps BTW, the senders IP address is usually inserted by the MTA, not
> > the
> > MUA in the headers. Good luck with getting that changed.
>
> Pete,
>
> You probably haven't read anything I've said before.
> IP address is inserted by thunderbird MUA by HELO=my_IP_address
> Hostname is inserted by evolution MUA by HELO=my_hostname

It is *provided* by the MUA to the MTA.  It is *inserted* in the
Received header by the MTA.  Nothing blocks the MTA from adding the MUA
IP address *despite* the information provided in the HELO message.

> I don't like both cases but hostname, unless it is a default
> "localhost.localdomain" is worse then IP address, that is why I
> proposed a patch.

Some MTAs might decide that you're playing games when the HELO is
wrong, and some might simply do a reverse DNS lookup or block your
access.

> MTA will report EXTERNAL IP Address which is acceptable, since MTA
> behavior is well known. If someone wants to change it, they will use
> VPN.

Outgoing MTAs can be configured to strip internal Received headers
completely at the border if you so choose.  Speak to your mail
administrator.


PS. It sounds like you want anon.penet.fi to return.