f_x wrote:

> The problem is that user2 can send a mail in the name of user1, because
> their are no checks if the $sender_address equals $authenticated_sender.

acl_check_mail:

deny
  message = sender does not match auth data
  ! senders = ${lookup mysql {select address from smtp_auth where
username='${quote_mysql:$authenticated_id}'}}



-- 
## List details at http://www.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://www.exim.org/eximwiki/

Reply via email to