I've got yet another question:

I only want to perform the "sender address verification" for users of the
domain
mydomain.tld, but not for users of my other domain (myotherdomain.tld).
Is this also possible?

Thanks 

Raphael  



-----Urspr�ngliche Nachricht-----
Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im
Auftrag von Tony Finch
Gesendet: Mittwoch, 11. Mai 2005 17:36
An: Raphael Reich
Cc: [EMAIL PROTECTED]
Betreff: Re: [exim] control outgoing relay

On Wed, 11 May 2005, Raphael Reich wrote:
>
> The users (whitch are all system users having maildirs) authenticate 
> themselves via SMPT AUTH. The problem is, that e.g. the user tom
> ([EMAIL PROTECTED]) can use any local part as sender address (e.g.
> [EMAIL PROTECTED]). I want to restrict the users to their own 
> local part.

In the RCPT ACL for your message submission service, put the following:

  # Do return address verification.

  require
    verify         = sender

  # Check that authenticated users aren't pretending to be someone else.

  deny
    message        = Sender address does not match authenticated user
    authenticated  = *
  ! condition      = ${if and{{ def:sender_address_data } \
                             {{ eq{$sender_address_data}{$authenticated_id}
}} }

In the router that handles email addresses of local users, add

   address_data = $local_part

Tony.
-- 
<[EMAIL PROTECTED]>   <[EMAIL PROTECTED]>   http://dotat.at/   ${sg{\N${sg{\
N\}{([^N]*)(.)(.)(.*)}{\$1\$3\$2\$1\$3\n\$2\$3\$4\$3\n\$3\$2\$4}}\
\N}{([^N]*)(.)(.)(.*)}{\$1\$3\$2\$1\$3\n\$2\$3\$4\$3\n\$3\$2\$4}}

--
## List details at http://www.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://www.exim.org/eximwiki/


--
## List details at http://www.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://www.exim.org/eximwiki/

Reply via email to