Concealing the sender's IP Address within message headers MailSite 9.2 and later provides the ability to conceal the senders IP address (for authenticated users) within the email message headers. This can help hide information about internal networks. The IP is replaced by the authenticated users email address to help maintain traceability.

This requires a change to the Registry (if using Registry Connector) or SQL Database (if using SQL Connector).

WARNING!!
Incorrectly editing the registry can damage the server, please be sure you know what you are doing

Registry Setup

• Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SMTPRA\Parameter
• Add a DWORD key called ConcealReceivedIP, set this value to 1.
• Restart the services.
• To revert this change, set value to 0 or delete entry and restart the services.

SQL Connector

• Locate MailServerProperties within the MailSite Database.
• Create a new row with the following values:

  Service - SMTPRA
  PropertyName - ConcealReceivedIP
  ServerRoleID - 0
  PropType - 4
  PropIntValue - 1

• Restart the services.
• To revert this change set value to 0 or delete the entry and restart the services.

With value set to 0 message header shows IP:

Return-path: <joe.blogs@qas-4.com>
Received: from client_hostname (unverified [10.42.40.209]) by qas-5.rockliffe.com (Rockliffe SMTPRA 9.2.0) with ESMTP id <B0000000005@qas-5.rockliffe.com> for <joe.blogs@qas-4.com>; Tue, 21 Apr 2009 03:26:51 -0700

With value set to 1 message header shows email address *:


Return-path: <joe.blogs@qas-4.com>
Received: from joe.blogs@qas-4.com by qas-5.rockliffe.com (Rockliffe SMTPRA 9.2.0) with ESMTP id <B0000000004@qas-5.rockliffe.com> for <joe.blogs@qas-4.com>; Tue, 21 Apr 2009 03:22:56 -0700

With this option enabled, we can no longer see the IP addressing scheme of the sender's network.

To hide the IP of emails sent from ExpressPro, a modification is required to the web.config file.

• Open web.config file under MailSite\WebServices\Web.ui\ with notepad
• Set 'headerConfig removeReceivedIP="true". (The default is false).
• Save the file and test.

*Note: Note to activate this feature, you also need to force SMTP authentication: In the MailSite Console make sure Server -> Security -> Security Properties -> SMTP -> Require SMTP authentication for relaying is checked. Users will need to make sure that the option for SMTP authentication is checked in their desktop client. Example Outlook 2007, Tools > Account Settings > select account > More Settings > Outgoing Server tab > check "My outgoing server (SMTP) requires authentication."