From: Rich Wales (no email)
Date: Tue Nov 01 2005 - 02:35:22 EST
My home mail server requires SASL authentication in order to submit
an outgoing message.
Is there a way for me to require the sender's address to match the
authenticated value? For example, if a user authenticates himself
as "fred" on smtpserver.example.tld, I would want to accept =only=
mail for which the MAIL FROM: address is "".
If possible, I'd like to go one step further and also require that
the address in the "From:" header line should match the authenticated
user's identity. Is this possible? (I realize such a restriction
could only be enforced after a DATA command has been issued and the
actual message has been received.)
I realize that doing either or both of these things will not, in
and of itself, block all forgery of mail -- but I'd still like to
be able to do it if there's a way.
Rich Wales
Palo Alto, CA, USA
|
|
|