11 ms·

Source? I don't think this is true. Doesn't seem to be the case for me. Maybe your email provider attaches your IP address?

by WA 3mo ago

fckapple 3mo ago
It’s in the headers. Send an email to your self from Mail and open the source in the inbox. There is your IP.
- ChrisMarshallNY 3mo ago
  Is this from iOS? I just tested from MacOS, and the only IPs were for the transit and auth servers. I'm not actually doubting it. saagarjha knows his stuff. I just don't see it, so maybe I'm holding it wrong.
  - frollogaston 3mo ago
    Same, I remember it being in the headers long ago but don't see it now. macOS Tahoe, Mail.app client, iCloud email sending to itself or to my Gmail, both set up in default ways, IPv6 disabled
    - ChrisMarshallNY 3mo ago
      From what I see above, it looks like the trick is to send from Mail.app to an account read by a different app (maybe just Gmail?). I would need to test with my hosting Webmail client, so maybe tomorrow.
  - fckapple 3mo ago
    See my comment here: https://news.ycombinator.com/item?id=48758444 https://news.ycombinator.com/item?id=48758444.
    - ChrisMarshallNY 3mo ago
      I saw that, in my headers, but in my case, it was not an IP in any subnet of mine. I’ll mess around, today, and see what comes up.
- xoa 3mo ago
  I also just tried this as well, sending an email from a Migadu-based account to one at both Gmail and MXRoute using Mail.app under macOS 15.7.7. Neither included any private IP address info I could find in either headers or raw source. That would be a good leak to know about and as sibling comment said saagarjha definitely knows their stuff, so any tips to replicate would be appreciated.
  - fckapple 3mo ago
    Received: from smtpclient.apple (ptr. [ip]) by smtp.gmail.com with ESMTPSA id ... for <...> (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Thu, 02 Jul 2026 ..:..:.. -0700 (PDT) Using Mail: Version 16.0 (3864.600.51.1.1). Sent from a Google Apps mail.
    - jijijijij 3mo ago
      For me that IP belongs to apple, when using the iOS mail client. I presume Apple forces third party apps to use their API and then stuff like this happens. Guess that's also on google, not mitigating that issue, tho. Have you tried a VPN? I wonder, if Apple manages to expose IP despite a VPN. They had issues with stuff like that before.
    - js2 3mo ago
      That Received header is inserted by smtp.gmail.com (Google), not Apple.
saagarjha 3mo ago
Seems like this is a Gmail thing: https://ylukem.com/blog/apple-mail-leaks-your-ip-address https://ylukem.com/blog/apple-mail-leaks-your-ip-address
- frollogaston 3mo ago
  Yes, was able to repro just now
- lapcat 3mo ago
  It's not a Gmail thing: > The reason why my IP address is visible is because Apple Mail sends emails with SMTP. Unless you use a proxy, your IP address is visible to an SMTP server, just like it's visible to an HTTP server when you use a web browser. This is not specific to Apple Mail or to Gmail.
  - saagarjha 3mo ago
    Yeah but I think Gmail seems to actually just keep that header rather than nuking it. To be fair I don't entirely know what I would do to fix it since (like the post) this seems like there aren't many good options here.
    - lapcat 3mo ago
      > I think Gmail seems to actually just keep that header rather than nuking it. I think that's common among email providers.
    - js2 3mo ago
      Gmail's SMTP servers are what's adding the received header with your IP address, not Apple Mail.
  - deleted 3mo ago
    [deleted]
- AnonC 3mo ago
  I clearly remember many years ago that this wasn’t the case with Gmail, when looking for the source IP address in a case involving harassment of a person. I could only get Gmail’s own IP address in the headers from the multiple emails I examined at that time. Nevertheless, as js2 said in another comment, it’s your mail provider (in this case Gmail) deciding whether to include the sender’s IP address or not.

Source? I don't think this is true. Doesn't seem to be the case for me. Maybe your email provider attaches your IP address?

by WA 3mo ago

Source? I don't think this is true. Doesn't seem to be the case for me. Maybe your email provider attaches your IP address?

fckapple 3mo ago

It’s in the headers. Send an email to your self from Mail and open the source in the inbox. There is your IP.

ChrisMarshallNY 3mo ago
Is this from iOS? I just tested from MacOS, and the only IPs were for the transit and auth servers. I'm not actually doubting it. saagarjha knows his stuff. I just don't see it, so maybe I'm holding it wrong.
- frollogaston 3mo ago
  Same, I remember it being in the headers long ago but don't see it now. macOS Tahoe, Mail.app client, iCloud email sending to itself or to my Gmail, both set up in default ways, IPv6 disabled
  - ChrisMarshallNY 3mo ago
    From what I see above, it looks like the trick is to send from Mail.app to an account read by a different app (maybe just Gmail?). I would need to test with my hosting Webmail client, so maybe tomorrow.
- fckapple 3mo ago
  See my comment here: https://news.ycombinator.com/item?id=48758444 https://news.ycombinator.com/item?id=48758444.
  - ChrisMarshallNY 3mo ago
    I saw that, in my headers, but in my case, it was not an IP in any subnet of mine. I’ll mess around, today, and see what comes up.
xoa 3mo ago
I also just tried this as well, sending an email from a Migadu-based account to one at both Gmail and MXRoute using Mail.app under macOS 15.7.7. Neither included any private IP address info I could find in either headers or raw source. That would be a good leak to know about and as sibling comment said saagarjha definitely knows their stuff, so any tips to replicate would be appreciated.
- fckapple 3mo ago
  Received: from smtpclient.apple (ptr. [ip]) by smtp.gmail.com with ESMTPSA id ... for <...> (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Thu, 02 Jul 2026 ..:..:.. -0700 (PDT) Using Mail: Version 16.0 (3864.600.51.1.1). Sent from a Google Apps mail.
  - jijijijij 3mo ago
    For me that IP belongs to apple, when using the iOS mail client. I presume Apple forces third party apps to use their API and then stuff like this happens. Guess that's also on google, not mitigating that issue, tho. Have you tried a VPN? I wonder, if Apple manages to expose IP despite a VPN. They had issues with stuff like that before.
  - js2 3mo ago
    That Received header is inserted by smtp.gmail.com (Google), not Apple.

saagarjha 3mo ago

Seems like this is a Gmail thing: https://ylukem.com/blog/apple-mail-leaks-your-ip-address https://ylukem.com/blog/apple-mail-leaks-your-ip-address

frollogaston 3mo ago
Yes, was able to repro just now
lapcat 3mo ago
It's not a Gmail thing: > The reason why my IP address is visible is because Apple Mail sends emails with SMTP. Unless you use a proxy, your IP address is visible to an SMTP server, just like it's visible to an HTTP server when you use a web browser. This is not specific to Apple Mail or to Gmail.
- saagarjha 3mo ago
  Yeah but I think Gmail seems to actually just keep that header rather than nuking it. To be fair I don't entirely know what I would do to fix it since (like the post) this seems like there aren't many good options here.
  - lapcat 3mo ago
    > I think Gmail seems to actually just keep that header rather than nuking it. I think that's common among email providers.
  - js2 3mo ago
    Gmail's SMTP servers are what's adding the received header with your IP address, not Apple Mail.
- deleted 3mo ago
  [deleted]
AnonC 3mo ago
I clearly remember many years ago that this wasn’t the case with Gmail, when looking for the source IP address in a case involving harassment of a person. I could only get Gmail’s own IP address in the headers from the multiple emails I examined at that time. Nevertheless, as js2 said in another comment, it’s your mail provider (in this case Gmail) deciding whether to include the sender’s IP address or not.