For security purpose, is there a configuration to remove the X-Originating-IP and RECEIVED headers before sending to the recipient or next route?
Existing headers (including X-Originating-IP and RECEIVED) cannot be removed. No options or configurations are available to remove them.