On Wed, Jul 12, 2017 at 1:43 PM, Frank Richter <frank.rich...@hrz.tu-chemnitz.de> wrote: > My aim is that the envelope from (Return-Path) is set to the header from > (whatever it is) for some of our webservers, where PHP programmers send > email, but don't set the envelope from, so that bounces will go to > apache@mydomain. They should go to the header-From …
This is something you should avoid, unless you have very strict control over what From addresses you permit. In other words, you need to ensure that you have egress filtering of From addresses for these cases. Please ensure, for your own sake, that the From (or envelope-from!) addresses are restricted to domains under your control, so that they won't contain e.g. Outlook-hosted e-mail addresses. Consider using SRS (sending rewrite scheme, see e.g. https://github.com/Exim/exim/wiki/SRS) for rewriting the sender address, and sure, use apache@mydomain as the base address for your rewrites, so that you get e.g. <SRS0.....gmail.com=frettled=apache@mydomain> as the envelope sender. -- Jan -- ## List details at https://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
