Client transmits sender's IP

pat247 commented 9 years ago

Emails sent from the Whiteout client reveal the sender's IP, the mail/mx.wmail.io servers preserve it in the headers.

Even mainstream services are now supressing sender IP (Gmail, FastMail) when using their web client.

xeoncross commented 8 years ago

Gmail still seems to show the client-ip. What do you mean they are suppressing the sender IP?

Manouchehri commented 8 years ago

This isn't Whiteout adding your IP, it's the mail server. Nearly every SMTP server adds an X-Originating-IP; it goes unnoticed because it won't be added if you use the web mail interface. Try using Thunderbird or any other mail client and you'll see the same issue.

The only free SMTP servers I know that don't add X-Originating-IP are wmail.io and riseup.net.

Return-Path: <manouchehri@wmail.io>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on spoonbill.riseup.net
X-Spam-Level: *
X-Spam-Pyzor: 
X-Spam-Status: No, score=1.1 required=11.0 tests=AM_TRUNCATED,DKIM_SIGNED,
    DKIM_VALID,DKIM_VALID_AU,FORWARD_RELAY,FROM_ALMOST_TO,NEAR_EMPTY,
    RCVD_IN_BL_SPAMCOP_NET,T_RP_MATCHES_RCVD shortcircuit=no autolearn=disabled
    version=3.4.0
Delivered-To: manouchehri@riseup.net
Received: from mx1.riseup.net (mx1-pn.riseup.net [10.0.1.33])
    (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
    (Client CN "*.riseup.net", Issuer "COMODO RSA Domain Validation Secure Server CA" (verified OK))
    by spoonbill.riseup.net (Postfix) with ESMTPS id 0B069F4
    for <manouchehri@riseup.net>; Thu, 10 Dec 2015 05:06:45 -0800 (PST)
Received: from mail.wmail.io (mail.wmail.io [54.93.174.1])
    (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
    (Client did not present a certificate)
    by mx1.riseup.net (Postfix) with ESMTPS id 31EC01A1E75
    for <manouchehri@riseup.net>; Thu, 10 Dec 2015 05:06:44 -0800 (PST)
Authentication-Results: mx1.riseup.net; dkim=permerror
    reason="verification error: signature timestamp in the future"
    header.d=wmail.io header.i=@wmail.io header.b=RVlvMEbJ;
    dkim-adsp=none (unprotected policy); dkim-atps=neutral
Received: from mx.wmail.io (mx.wmail.io [54.93.165.70])
    by mail.wmail.io (Postfix) with ESMTPSA id DEB053F8A9
    for <manouchehri@riseup.net>; Thu, 10 Dec 2015 13:17:57 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=wmail.io; s=mail;
    t=1449753479; bh=2I87ZOF4NKM9Wqwf4GAFvHrWsLLF93qKkwDCClfxLT4=;
    h=Subject:From:To:Date:From;
    b=RVlvMEbJUfOGysc3vQJp85uDIbJob+zHVpVvQNe3PeAh/fpKrYfqBrpSzlHPk1IuU
    YkxMr3jxhj9Ja0V62tXh5JAquHbnhVNxi/gpmL+NOXyUDueXgBb4DP+vFxh+V76NCl
    4kHtKhJwjhd8+iIj9dfjwCQXSbU6wht5nx9KVWIU=
Received: from 54.93.119.147 by mx.wmail.io with SMTP; Thu, 10 Dec 2015 13:13:13 +0000 (UTC)
Content-Type: multipart/encrypted; protocol="application/pgp-encrypted";
    boundary="----sinikael-?=_1-14497527654640.9497128049843013"
Content-Description: OpenPGP encrypted message
Content-Transfer-Encoding: 7bit
Subject: Test
From: David Manouchehri <manouchehri@wmail.io>
To: manouchehri@riseup.net
Date: Thu, 10 Dec 2015 13:06:05 +0000
Message-Id: <1449752765466-feee81f6-c64ce79e-42ca291d@wmail.io>
MIME-Version: 1.0
X-Virus-Scanned: clamav-milter 0.98.7 at mx1.riseup.net
X-Virus-Status: Clean

whiteout-io / mail

Client transmits sender's IP #391