Firewall Wizards mailing list archives

Re: Hiding Host Information


From: "James Conley" <conley () enteka com>
Date: Tue, 6 Oct 1998 09:58:38 -0700

I don't know what version of sendmail you use with Sidewinder, but under
V8.9 you we use:

FEATURE(always_add_domain)dnl
FEATURE(masquerade_entire_domain)dnl
FEATURE(masquerade_envelope)dnl
MASQUERADE_AS(`enteka.com')dnl

I think the trick is that you need the masquerade_envelope.

If you are trying to remove it from fields like "msgid" as well, it is a
little messier.  You'll need to change the format of these fields (and a few
others) like:

?M?HMessage-ID: <$t.$i.$m>

(you'll also want to change Resent-Message-ID and anything else that
normally uses $j [full host name])

To strip out Message-ID's that you receive, well, that's a tricky one that
most likely will need some modifications to the Sendmail source code.

In general, I don't believe messing with the headers is worth it.  You gain
very little in security, but you have a huge problem if you need to track
down mail problems.

James "Mike" Conley
Enteka Enterprise Technology Services, Inc.
www.enteka.com


-----Original Message-----
From: Richard Christie <richardc () sundown ncsc mil>
To: firewall-wizards () nfr net <firewall-wizards () nfr net>
Date: Monday, October 05, 1998 4:11 PM
Subject: Hiding Host Information



I'm running a sidewinder Firewall with version 3.2 of the software. I am
trying
to hide or remove internal host information from my e-mail message headers.
If
you look at the headers for this
e-mail, you will see my internal mail server's name and ip address.  I have
tried
using:

MASQUERADE_AS(domain.com)dnl
MASQUERADE_DOMAIN(domain.com)dnl
FEATURE(masquerade_entire_domain)dnl

replacing domain.com with the domain information I want.  None of this
worked.
I called
Secure Computing, and I haven't gotten the information they promised me.

Does anyone have any ideas on how to mask this sensitive information.


Richard Christie






Current thread: