> However, anyone who DOES have a valid account, and logs in via SMTP > AUTH, can send mail "from" any email/domain, "to" any email/domain.
not exactly; assuming your ASSP sees both incoming and outgoing traffic, you may switch on the "DoLocalSenderDomain" and/or the "DoLocalSenderAddress" (along with the LDAP or VRFY options) this way a sender will need to use a valid *LOCAL* domain (or email address) otherwise the email will be refused ------------------------------------------------------------------------------ Throughout its 18-year history, RSA Conference consistently attracts the world's best and brightest in the field, creating opportunities for Conference attendees to learn about information security's most important issues through interactions with peers, luminaries and emerging and established companies. http://p.sf.net/sfu/rsaconf-dev2dev _______________________________________________ Assp-test mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-test
