In a recent note, Schramm, Rob said: > Date: Fri, 13 Oct 2006 15:42:32 -0400
> Reply-To: IBM Mainframe Discussion List <[email protected]> > Sender: IBM Mainframe Discussion List <[email protected]> > From: "Schramm, Rob" <[EMAIL PROTECTED]> Note the three headers above for an example. > I have been out to the cbttape.org looking for a version of the MVS SMTP > exit that just forces the user ID of the address space as the "from". > Just to ensure that no one running a batch job can send an e-mail with > someone else's address. > I hope you'll respect Internet tradition enough that: o If a "Sender:" header appears, that is the one that must match the user ID o If "Sender:" appears and matches the user ID, you enforce no constraint on "From:" This is the protocol when, for example, an administrative assistant composes a message on behalf of his manager, or, as above, by mailing list servers. You should do your forcing on "Sender:", not on "From:". See RFC 822 (or is it 2822?) -- gil -- StorageTek INFORMATION made POWERFUL ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
