MailSite Knowledge Base

Enter text to search for or enter the document ID number.
Search:   
Doc ID:   

Concealing the sender's IP Address within message headers
Document #:10507

Synopsis:
MailSite 9.2 and later provides the ability to conceal the senders IP address (for authenticated users) within the email message headers. This can help hide information about internal networks. The IP is replaced by the authenticated users email address to help maintain traceability.

More Information:

This requires a change to the Registry (if using Registry Connector) or SQL Database (if using SQL Connector).

WARNING!!
Incorrectly editing the registry can damage the server, please be sure you know what you are doing
Registry Setup
  • Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SMTPRA\Parameter
  • Add a DWORD key called ConcealReceivedIP, set this value to 1.
  • Restart the services.
  • To revert this change, set value to 0 or delete entry and restart the services.

SQL Connector
  • Locate MailServerProperties within the MailSite Database.
  • Create a new row with the following values:
    Service - SMTPRA
    PropertyName - ConcealReceivedIP
    ServerRoleID - 0
    PropType - 4
    PropIntValue - 1
  • Restart the services.
  • To revert this change set value to 0 or delete the entry and restart the services.


With value set to 0 message header shows IP:

Return-path: <joe.blogs@qas-4.com>
Received: from client_hostname (unverified [10.42.40.209]) by qas-5.rockliffe.com (Rockliffe SMTPRA 9.2.0) with ESMTP id <B0000000005@qas-5.rockliffe.com> for <joe.blogs@qas-4.com>; Tue, 21 Apr 2009 03:26:51 -0700


With value set to 1 message header shows email address *:


Return-path: <joe.blogs@qas-4.com>
Received: from joe.blogs@qas-4.com by qas-5.rockliffe.com (Rockliffe SMTPRA 9.2.0) with ESMTP id <B0000000004@qas-5.rockliffe.com> for <joe.blogs@qas-4.com>; Tue, 21 Apr 2009 03:22:56 -0700

With this option enabled, we can longer see the IP addressing scheme of the senders network.

*Note: Note to activate this feature, you also need to force SMTP authentication: In the MailSite Console make sure Server -> Security -> Security Properties -> SMTP -> Require SMTP authentication for relaying is checked.. Users will need to check in their desktop client that the option for SMTP authentication. Example Outlook 2007, Tools > Account Settings > select account > More Settings > Outgoing Server tab > check “My outgoing server (SMTP) requires authentication."

Last revised 2009-5-26
 
 

MailSite SE - Easy email and calendar server software for small businesses | MailSite ExpressPro - AJAX email and calendar client for web browsers
MailSite Fusion SP - Scalable and clustered email and calendar hosting software | Email Server and Calendar Server Software
MailSite Mobile Sync Server | MailSite Calendar Server Software | MailSite Anti-Virus | Mailsite Anti-Spam | Customer Portal
Support | Webstore | Services | Partners | Press | Company | Contact | Reviews | Site Map | Privacy | ©2010 MailSite, Inc.
BlackBerry® is a registered trademark of Research in Motion Limited. Outlook® and ActiveSync® are registered trademarks of Microsoft Corporation. MailSite Inc. is in No Way Affiliated with Research in Motion Limited or Microsoft Corporation.