How to disable various headers
How to disable various headers
Problem
The aim of this wiki is to show how to remove sensitive email headers that are normally generated when sending an email.
Resolution
1. To start with, we will first create a custom header check file, that will contain our headers that we will ignore:
$ touch /opt/zimbra/conf/custom_header_checks
2. Once the file is created, we are going to add it to the zimbra configuration:
$ zmprov mcf zimbraMtaHeaderChecks 'pcre:/opt/zimbra/conf/postfix_header_checks pcre:/opt/zimbra/conf/custom_header_checks'
3. The next step would be to populate the file with data. Below is an example of this file, with various headers that we can ignore:
/X-Virus-Scanned/ IGNORE /^Received: from 127.0.0.1/ IGNORE /^X-Originating-IP:/ IGNORE /^X-Mailer:/ IGNORE /^Mime-Version:/ IGNORE /^User-Agent:/ IGNORE /^X-Sanitizer:/ IGNORE /^X-Spam-Status:/ IGNORE /^X-Spam-Level:/ IGNORE /^Message-ID:/ IGNORE /^X-MimeOLE:/ IGNORE /^X-MSMail-Priority:/ IGNORE /^Received:/ IGNORE
The above headers are just an example. You can use any of these headers to hide sensitive information based on your needs. But beware that some MX servers will automatically mark such emails passing through as spam. Furthermore, removing all the above information will make troubleshooting very difficult. Choose which headers you would like to remove, and perform tests before implementing that on a production system.
4. Once we finish editing that file, we run the following commands to complete the setup:
$ zmprov mcf zimbraMtaBlockedExtensionWarnRecipient FALSE $ zmmtactl restart
5. Confirm that the new header check file is picked up by zimbra:
$ postconf | grep header_checks