How to hide ip adress?

Hey,

Is there a way to hide IP adress so the ip adress of server or 127.0.0.1 is used in header instead the adress email is being sent from? I would like to hide my company users ip's so their ip's wouldn't be visible in emails. A way to disable it for all or just some users?

Regards,

Fleibo ;)

[324 byte] By [Fleibo] at [2007-11-26 9:42:58]
# 1
"Bad Idea:There is no useful information in the ip address, and many reasons to leave it alone. Debugging any problem is made MUCH harder if you hide that stuff.
jay_plesset at 2007-7-7 0:43:03 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...
# 2

Thanks,

Well actually i wanted to give some users some privacy. Maybe it's possible to just do it for few so i could do it on myself ;) I don't realy like sending emails and knowing that someone on other side knows my HOME IP or WORK IP and knows my exact location.

That's why i would prefer to have some option to do that. Would realy appreciate it if you know how to do it.

Fleibo :)

Fleibo at 2007-7-7 0:43:03 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...
# 3

First, it really, truly helps me to help you, if you bother to let me know what version of Messaging Server you're running.

Second, how possibly can my internal ip address be of any use to you? 192.166.1.221?

It's behind a NAT firewall, and you can't get to it anyway.

127.0.;0.1? Every machine has that internal address. Again, knowing that is of no use to anybody.

Your ip that your isp assigns you? How can that be a privacy issue? There's no mapping to your location, and if you don't have a firewall blocking access to that ip address, you NEED ONE far more than you need to "hide" that.

If you accept mail to your system, then you need a PUBLIC ip address that anybody sending mail to you can access.

I just don't understand how hiding something that is so useful in troubleshooting a problem can help you.

Unless you're sending spam out, and you don't want your ip blocked.....

jay_plesset at 2007-7-7 0:43:04 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...
# 4

Something like TOR might help you, it allows you to hide your IP address when using a variety of web apps and can be built into products too, its a network that routes your info via other servers around the world securely. Its a free open source product too - so all good! I wrote a little guide some time ago http://www.kazap.co.uk/page.php?20

Kazap at 2007-7-7 0:43:04 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...
# 5

Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005) - Sun Java Messaging System 2005 Q4

I don't want to send spam but all i want to hide is the IP adress of person sending email. And usually it's not INTERNAL adress or 127.0.0.1 but EXTERNAL one. And that worries me. I don't realy see how this would be innapriopriate or not helping

Kazap, Tnx for your response but i don't think it's the application for me. I heard about it and i might want to use it in the future for my own sake but in this issue i just want to hide ppl's ip adresses that use either WWW access to mail or some mail client without any configuration on their computers.

Fleibo at 2007-7-7 0:43:04 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...
# 6

Ok. You want the CLIENT ip address supressed? And, you expect the Messaging Server to do something about it?

Well, you could use the 'headertrim" capability, I suppose. I strongly believe that this is a "Very Bad Idea" to even attempt to do.

In general "security by obscurity" is of no particular use. It only makes people feel better, with no real security benefit.

jay_plesset at 2007-7-7 0:43:04 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...
# 7
Think that combination of timestamp and starting IP address (public, private, localhost, whateva..) allows admins to easy trace suspect e-mail (threats, ransom demands etc.). Not sure how will bayesian based antispam filters react on this change...
gljiva at 2007-7-7 0:43:04 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...
# 8

Hi,

Unfortunately there doesn't seem to be any easy option. To summarise:

-> Messaging server has no feature to 'hide' a clients IP address (whether that be for WebMail upload or SMTP upload).

-> There is a feature to remove Received headers (headertrim as Jay mentioned earlier) but this could potentially break things such as mail-loop detection mechanisms (which counts the number of received headers) and could trigger external spam rules as mentioned earlier.

-> An option which hasn't been suggested is to create a custom channel which can be written to scan header lines and replace information within those lines. This would require a fair bit of work though (C code).

-> The final option is to obscure the client IP addres, through the use of a proxy mechanism or VPN etc.

Regards,

Shane.

shane_hjorth at 2007-7-7 0:43:04 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...
# 9

Ah tnx,

Well i don't want to do any header trimming, nor writting additional software for that :)

About proxy i knew long time ago, althought it's mostly for WWW access and i dont see how it can be used for smtp.

I guess i will have to live with it. Just wanted to know if it's possible ;) No problem. Tnx all for help.

Fleibo at 2007-7-7 0:43:04 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...