Sendmail ID/Patch Security

[Chris Watson]

When Sendmail is delivering mail to my Exchange server, and presumably anywhere else, it identifies its version and patch level to the receiving server, as below;

sendmail(8.9.3 (PHNE_18979)/8.7.1)

which all and sundry can see in the email header.

It seem to me that this is a security risk.

Does anyone now how to prevent the version/patch level being passed onto receiver.

Regards

Chris

[Dave Kelly_1 · Accepted solution]

The header is defined in the sendmail.cf file as:

HReceived: $?sfrom $s $.$?_($?s$|from $.$_)
$.by $j ($v/$Z)$?r with $r$. id $i$?u
for $u; $|;
$.$b

The ($v/$Z) is the culprit. You should be able to remove it.