> I use Squirrelmail 1.4.3a from within CPanel.  Each email
> I send from any of my SM email accounts contains a header
> of the following format:
>
> Received from 127.0.0.1 ([127.0.0.1]) (SquirrelMail
> authenticated user [EMAIL PROTECTED]); by telefog.com with HTTP; Wed, 16
> Feb 2005 18:04:20 -0800 (PST)
>
>
> No matter which of my Squirrelmail advanced identities I
> use as the FROM address, this header divulges [EMAIL PROTECTED] as the
> actual email address for my account, as you can see.  And when I use
> Mailman 2.1.5
> (also under CPanel), the following Mailman option...
>
>
> Hide the sender of a message, replacing it with the list
> address (Removes From, Sender and Reply-To fields) (Edit anonymous_list)
>
>
> ...fails to remove my email address from this header,
> which renders my attempt to "hide the sender" futile.
>
> Is this something that I or the folks at my CPanel
> hosting company could fix?  Would it be fixable if I were to install my
> own standalone version of Squirrelmail, separate from CPanel?

This is a security feature. Username can't be forged by other users of
your webmail interface.

See
http://sourceforge.net/tracker/index.php?func=detail&aid=847107&group_id=311&atid=423679

It is possible to port it to stable, but administrator that enables such
feature must understand possible consequences of his or her actions. I
would argue against making it one click option in stable squirrelmail
versions.

If you don't care about possible legal troubles when interface is abused,
you can edit class/deliver/Deliver.class.php and disable that header.

Header causes problems with antispam tools only when email server is in
dialup/broadband ip range. If you don't want to see your login name in
email header, encrypt it with some two way crypto.

-- 
Tomas


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
--
squirrelmail-users mailing list
Posting Guidelines: 
http://squirrelmail.org/wiki/wiki.php?MailingListPostingGuidelines
List Address: [email protected]
List Archives: 
http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.user
List Archives:  http://sourceforge.net/mailarchive/forum.php?forum_id=2995
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

Reply via email to