Start/notes.ini Parameters/SMTPNoVersionInRcvdHdr

SMTPNoVersionInRcvdHdr

Profile

Parameter
SMTPNoVersionInRcvdHdr
Category
Mail / Router
Component
Server (outbound SMTP)
Available since
Domino 6.0 (continuously through 14.5.1)
Supported versions
9.0.1, 10.0, 11.0, 12.0, 14.0, 14.5, 14.5.1
GUI equivalent
Configuration document → NOTES.INI Settings
Possible values
0 = default (version info written into own Received header), 1 = suppress version info

Description

Every SMTP server that forwards a mail appends a Received: header. By default, Domino writes its own software version into the header it adds, e.g.:
Received: from mail.example.com (HCL Domino Release 14.5.1FP1)
          by mx.partner.example with ESMTPS id 1234567890
          for <recipient@example.org>; Sat, 8 May 2026 06:55:00 +0200
This information gives external recipients (and attackers) a precise picture of the deployed Domino version. With SMTPNoVersionInRcvdHdr=1, the version suffix is removed:
Received: from mail.example.com
          by mx.partner.example with ESMTPS id 1234567890
          for <recipient@example.org>; Sat, 8 May 2026 06:55:00 +0200
The parameter affects only the header that the local Domino server itself adds — Received: headers from other hops (e.g. smarthost, cloud MTA) are not modified.
Hardening pair with SMTPGreeting: HCL KB0088717 lists both parameters together as mandatory banner/header hardening. Without SMTPNoVersionInRcvdHdr=1, hiding only the banner is not enough — the version info would otherwise still leak in every Received header.

Example configuration

Default (version info is written into own Received header):
SMTPNoVersionInRcvdHdr=0
Production hardening:
SMTPNoVersionInRcvdHdr=1
Runtime variant:
set config SMTPNoVersionInRcvdHdr=1
tell smtp update config

Notes & pitfalls

  • Affects only locally: The parameter only modifies the Received: header added by the local Domino server. If the mail goes through an upstream smarthost that itself adds Domino version info, it remains.
  • Combine with removing $Mailer / $MIMETrack: Recommendation from HCL KB0078805 — additionally enter the fields $Mailer and $MIMETrack in the configuration document under MIME → Advanced → Advanced Outbound Message Options → Notes items to be removed from headers to also suppress internally routed hop traces.
  • Value 0 is default: If you set the parameter and want to roll it back, set it explicitly to 0 or remove it.
  • Activation: Takes effect after server restart or dynamically via tell smtp update config.
  • Spelling not critical: HCL docs show both SMTPNoVersionInRcvdHdr and SMTPNOVERSIONINRCVDHDR; Domino treats notes.ini keys case-insensitively.
  • Not for the banner: Does not hide the Domino version in the greeting banner — that is what SMTPGreeting is for. Both parameters belong together.

Sources