497901 - Thunderbird include my IP address in the email header.

Status: RESOLVED INVALID

(Thunderbird :: Security, defect)

Description

[cshong87]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.10) Gecko/2009042316 Firefox/3.0.10 (.NET CLR 3.5.30729)
Build Identifier: 2.0.0.21

I seek IP address as my privacy.

I'm currently unsing GMail email account when sending email with thunderbird.

GMail never include my IP address in the email header if I send email through GMail's web mail site.

I tried to send an email into my other email (Hotmail) by using Thunderbird. Then, I log on to Hotmail to read the header of the received email. I found that Thunderbird does include my computer's IP address (192.168.x.x) and the IP address assigned by my Internet Service Provider, in the email header.

Reproducible: Didn't try



Expected Results:  
Thunderbird should have an option that let me hide my IP addresses (including my Computer's IP Address and the IP Address assigned by my ISP) by not include them in the email header. Or, if hiding the IP address assigned by my ISP is impossible, at least hide my computer's IP address.

Comment 1

[rsx11m]

I'm sure that's a duplicate, but as a short explanation:

- The IP address assigned by your *provider* is added by the outgoing mail
  server, where Gmail hides it for webmail but not for SMTP connections.

- There is a hidden preference mail.smtpserver.smtp#.hello_argument which
  you can set to prevent Thunderbird from sending your *local* IP address
  with the greeting to the mail server.

See http://forums.mozillazine.org/viewtopic.php?f=39&t=574630 for instructions and discussion on the IP header information (there are other threads as well).

Comment 2

[Matthias Versen [:Matti]]

Based on the RFCs the Client must send it's own Domain in the Helo/EHLO command.
Just read as example rfc0821 but you can override that as rsx11m already explained.

The received by is added by the receiving mail server as well as the Output of the Helo/EHLO command.

marking invalid