Z-Push icon indicating copy to clipboard operation
Z-Push copied to clipboard

add remote device IP as Received header in outbound email

Open si458 opened this issue 1 year ago • 2 comments

Is your feature request related to a problem? Please describe. if for example a device gets hacked and the attacker uses activesync to send out emails, the only headers you see in an email say Received: from localhost ([10.0.0.123]) by myserver.com with MailEnable ESMTPA; Wed, 8 May 2024 14:49:40 +0100 the IP address listed is the IP address of your z-push server and not who actually sent the email in the first place! so if you had say 10 devices connected to 1 email account and 5 devices on another email account, who sent the email?

Describe the solution you'd like it would be nice to add an extra header Received: with the remote devices IP address when zpush received the SendMail command, that way when you check the email headers, you can see which device sent the email to your zpush before it sends the email to your smtp server

Describe alternatives you've considered the isnt anything currently, apart from having to manually check the timestamps of the Received and then hopefully match them with z-push logs to see what IP/user send the email in the first place

Additional context Add any other context or screenshots about the feature request here.

si458 avatar May 08 '24 14:05 si458

As far as I know Exchange doesn't offer this, and it could be considered sensitive information to turn on by default.

Would need to put this behind a config flag to turn on.

matidau avatar May 10 '24 01:05 matidau

@matidau that would be perfectly fine by me! Off by default

si458 avatar May 10 '24 05:05 si458

@si458 I've had a bit more of a look, to my eyes this looks to be Backend dependant, are you using the Imap backend?

matidau avatar Jun 10 '24 12:06 matidau

@matidau yes I'm using imap as my backend 😀

si458 avatar Jun 10 '24 12:06 si458