Skip to content
This repository has been archived by the owner on Jul 10, 2019. It is now read-only.

Client transmits sender's IP #391

Open
pat247 opened this issue Jul 7, 2015 · 2 comments
Open

Client transmits sender's IP #391

pat247 opened this issue Jul 7, 2015 · 2 comments

Comments

@pat247
Copy link

pat247 commented Jul 7, 2015

Emails sent from the Whiteout client reveal the sender's IP, the mail/mx.wmail.io servers preserve it in the headers.

Even mainstream services are now supressing sender IP (Gmail, FastMail) when using their web client.

@xeoncross
Copy link

Gmail still seems to show the client-ip. What do you mean they are suppressing the sender IP?

@Manouchehri
Copy link

This isn't Whiteout adding your IP, it's the mail server. Nearly every SMTP server adds an X-Originating-IP; it goes unnoticed because it won't be added if you use the web mail interface. Try using Thunderbird or any other mail client and you'll see the same issue.

The only free SMTP servers I know that don't add X-Originating-IP are wmail.io and riseup.net.

Return-Path: <[email protected]>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on spoonbill.riseup.net
X-Spam-Level: *
X-Spam-Pyzor: 
X-Spam-Status: No, score=1.1 required=11.0 tests=AM_TRUNCATED,DKIM_SIGNED,
    DKIM_VALID,DKIM_VALID_AU,FORWARD_RELAY,FROM_ALMOST_TO,NEAR_EMPTY,
    RCVD_IN_BL_SPAMCOP_NET,T_RP_MATCHES_RCVD shortcircuit=no autolearn=disabled
    version=3.4.0
Delivered-To: [email protected]
Received: from mx1.riseup.net (mx1-pn.riseup.net [10.0.1.33])
    (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
    (Client CN "*.riseup.net", Issuer "COMODO RSA Domain Validation Secure Server CA" (verified OK))
    by spoonbill.riseup.net (Postfix) with ESMTPS id 0B069F4
    for <[email protected]>; Thu, 10 Dec 2015 05:06:45 -0800 (PST)
Received: from mail.wmail.io (mail.wmail.io [54.93.174.1])
    (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
    (Client did not present a certificate)
    by mx1.riseup.net (Postfix) with ESMTPS id 31EC01A1E75
    for <[email protected]>; Thu, 10 Dec 2015 05:06:44 -0800 (PST)
Authentication-Results: mx1.riseup.net; dkim=permerror
    reason="verification error: signature timestamp in the future"
    header.d=wmail.io [email protected] header.b=RVlvMEbJ;
    dkim-adsp=none (unprotected policy); dkim-atps=neutral
Received: from mx.wmail.io (mx.wmail.io [54.93.165.70])
    by mail.wmail.io (Postfix) with ESMTPSA id DEB053F8A9
    for <[email protected]>; Thu, 10 Dec 2015 13:17:57 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=wmail.io; s=mail;
    t=1449753479; bh=2I87ZOF4NKM9Wqwf4GAFvHrWsLLF93qKkwDCClfxLT4=;
    h=Subject:From:To:Date:From;
    b=RVlvMEbJUfOGysc3vQJp85uDIbJob+zHVpVvQNe3PeAh/fpKrYfqBrpSzlHPk1IuU
    YkxMr3jxhj9Ja0V62tXh5JAquHbnhVNxi/gpmL+NOXyUDueXgBb4DP+vFxh+V76NCl
    4kHtKhJwjhd8+iIj9dfjwCQXSbU6wht5nx9KVWIU=
Received: from 54.93.119.147 by mx.wmail.io with SMTP; Thu, 10 Dec 2015 13:13:13 +0000 (UTC)
Content-Type: multipart/encrypted; protocol="application/pgp-encrypted";
    boundary="----sinikael-?=_1-14497527654640.9497128049843013"
Content-Description: OpenPGP encrypted message
Content-Transfer-Encoding: 7bit
Subject: Test
From: David Manouchehri <[email protected]>
To: [email protected]
Date: Thu, 10 Dec 2015 13:06:05 +0000
Message-Id: <[email protected]>
MIME-Version: 1.0
X-Virus-Scanned: clamav-milter 0.98.7 at mx1.riseup.net
X-Virus-Status: Clean

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

4 participants