Filtering email headers generated from internal network (Sensible?)

From: Bipin Gautam <visitbipin_at_hotmail.com>
Date: 9 May 2005 15:36:06 -0000

('binary' encoding is not supported, stored as-is) Is it sensible to filter extra email headers in the gateway generated from your internal network before it leaves your server, so that Information like... User-Agent:, X-Virus-Scanned:, and those EXTRA hopps of Received from: (headers........) won't leak out, which could be a valuable information for a potential intruder. Moreover the trouble multiplies if a software exploit is realesed before patch. It is kinda Security by obscurity. But if it buys you some extra time to act isn't is sensible to impliment or just too paranoid?

drop your views,
Bipin Gautam
http://bipin.sosvulnerable.net/
Received on May 09 2005