For security purpose, is there a configuration to remove the X-Originating-IP and Received headers before sending to the recipient or next route?
Existing headers, such as X-Originating-IP and Received, are standard infrastructure headers with a fixed format. They cannot be removed, and there are no configuration options available for them.