question

createshare-7115 avatar image
0 Votes"
createshare-7115 asked AaronXue-MSFT edited

Hide Internal IP of Exchange and System

Hi,

My Exchange 2013 sends its Lan IP and the PC's LAN IP address as well in the headers even after running

[PS] C:\>Get-SendConnector "External" | Remove-ADPermission -User "NT AUTHORITY\ANONYMOUS LOGON" -ExtendedRights ms-Exch-Send-Headers-Routing


Is there any other setting I need to change in Exchange?

Thanks.

office-exchange-server-administration
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

AndyDavid avatar image
0 Votes"
AndyDavid answered

Is there just one server and it sends directly to the internet?
If so, then that is expected.

See:
https://docs.microsoft.com/en-us/answers/questions/286976/exchange-server-information-showing-in-header-afte.html

That's expected. Removing that permission "Controls the preservation of RECEIVED headers in messages. If this permission isn't granted, all received headers are removed from messages." When you send the message externally, that last hop is not your org receiving it, its the recipient's org.
https://docs.microsoft.com/en-us/exchange/mail-flow/connectors/send-connectors?view=exchserver-2019
The header stamp showing the receiving connection between the Exchange Server and a receiving external server is not something you can control.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

AaronXue-MSFT avatar image
0 Votes"
AaronXue-MSFT answered AaronXue-MSFT edited

Hi @createshare-7115 ,

According to my test, you can’t hide the IP address in the header of email.

The only thing we could do is modify the FQDN.

You can but it does nothing to improve security and it is not recommended. In general, you can’t achieve any additional security by trying to hide things that weren’t designed to be hidden. IP address and the FQDN is intended to be known. It's by designed.


If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi @createshare-7115 ,

It has been a long time since the last reply, did these suggestions help you?

If the above suggestion helps, please click “Accept as answer” to mark helpful reply as an answer. Your action would be helpful to other users who encounter the same issue and read this thread.

0 Votes 0 ·