Penetration Testing mailing list archives

Filtering email headers generated from internal network (Sensible?)


From: Bipin Gautam <visitbipin () hotmail com>
Date: 9 May 2005 15:36:06 -0000




Is it sensible to filter extra email headers in the gateway generated from your internal network before it leaves your 
server, so that Information like...   User-Agent:, X-Virus-Scanned:,  and those EXTRA hopps of  Received from: 
(headers........)     won't leak out, which could be a valuable information for a potential intruder. Moreover the 
trouble multiplies if a software exploit is realesed before patch. It is kinda Security by obscurity. But if it buys 
you some extra time to act isn't is sensible to impliment or just too paranoid? 

drop your views,
Bipin Gautam
http://bipin.sosvulnerable.net/


Current thread: