Email headers leak client IP info

[TomPotts]

I see that my installation (5.0.18) outputs the client's IP information in a Received: line of the header as my server accepts the email, even when it is outgoing. I don't want that information to leak.

BTW, it only happens when I use a MUA. The weeb interface doesn't leak it.

It's a postfix issue, but how do I set Zimbra so it holds the tweak?

This could be a deal breaker. I can't recommend Zimbra to my customers if this problem cannot be solved...

Is there a way to prevent Zimbra from doing this?

[bertie_uk]

Check out my solution here: [SOLVED] Nessus Security Scan Fail - Internal IP in HTTP Header

[TomPotts]

I followed your suggestion, but clients couldn't log in anymore, so I reversed it.

BTW, these are email header leaks.

[veronica]

You perhaps need to set this:-

zmprov mcf zimbraSmtpSendAddOriginatingIP FALSE

By default it is TRUE.

[bertie_uk]

Realise that now (email headers)

There is an option in Zimbra Admin for this too, but the above command should do the same.

However, why your clients couldn't log in is strange. Was the domain name you used in jetty.xml.in the same as that used to access your Zimbra?