I would do something like that in data ACL:
deny
condition = ${if match
{$header_from}{\N(domain1|domain2|domain3)\N}{no}{yes}}Will Harrison wrote: > Sorry - the regexp in data ACL. I think the other method may be more > easily bypassed. > > Do you know if there are any examples of the regexp method as I am no > exim expert. > >>> >>> >>> Renaud Allard wrote: >>>> It will check the actual sender, the one in the "MAIL FROM:" SMTP >>>> negotiation. This is the "return-path". >>>> >>>> Of course, if your php scripts send everything as "[EMAIL PROTECTED]" (php >>>> mail() function I think) this won't be a good solution. So you should >>>> use a php function which speaks SMTP and force php devs to use it. >>>> >>>> If you require that this happens with the "From:" header, you will have >>>> to use a regexp in the data acl. >>>> >>>> Will Harrison wrote: >>>>> Thank you Renaud >>>>> >>>>> Will this actually check the "From:" header or just the actual sender? >>>>> >>>>> Thanks again >>>>> >>>>> Will >>>>> >>>>> Renaud Allard wrote: >>>>>> Of course, with something like that it should work: >>>>>> >>>>>> acl_check_rcpt: >>>>>> >>>>>> accept >>>>>> hosts = : >>>>>> endpass >>>>>> message = Sending mails from >>>>>> $sender_address_domain is >>>>>> not permitted >>>>>> sender_domains = +local_domains >>>>>> >>>>>> accept >>>>>> authenticated = * >>>>>> endpass >>>>>> message = Sending mails from >>>>>> $sender_address_domain is >>>>>> not permitted >>>>>> sender_domains = +local_domains >>>>>> >>>>>> >>>>>> Will Harrison wrote: >>>>>>> Can we restrict mails sent from the local host to only be allowed to >>>>>>> have their sender/from address be from a valid domain in >>>>>>> /etc/localdomains? >>>>>>> >>>>>>> If a php script is used by a spammer he will usually set the from >>>>>>> address to something other than the real domain e.g. >>>>>>> [EMAIL PROTECTED] As paypal.com in not listed in localdomains can >>>>>>> we reject it? >>>>>>> >>>>>>> I hope I am making sence. Thanks in advance. >>>>>>> >>>>>>> Will >>>>>>> >>> >> >
signature.asc
Description: OpenPGP digital signature
-- ## List details at http://www.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://www.exim.org/eximwiki/
