Speaking of SMTP (including CSSMTP), how do your shops prevent Sender spoofing? How do you validate that the From: in the email is authorized? I ask because while we use SMTP internally, mostly for mail from production batch jobs, we have no controls in place that would prevent someone from building an email that looks like it came from the President/CEO, etc. It is for this reason that our email team doesn’t allow mail originating from the mainframe to be sent external.
_________________________________________________________________ Dave Jousma Assistant Vice President, Manager, Mainframe Engineering [email protected] 1830 East Paris, Grand Rapids, MI 49546 MD RSCB2H p 616.653.8429 f 616.653.2717 -----Original Message----- From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf Of Jantje. Sent: Thursday, April 28, 2016 7:15 AM To: [email protected] Subject: Re: SMTP question. On Thu, 28 Apr 2016 00:05:28 +0000, Field, Alan <[email protected]> wrote: > >One thing we see from the failing lpar (in the SMTP log) is > > MAIL FROM:<userid%[email protected]> > MAIL FROM: is part of the SMTP protocol for specifying the originator of the e-mail. What goes between the <> is supposed to be the e-mail address of the sender of the message. It seems to me you need to look at the configuration and/or e-mail address list in SAS. I don't think the SMTP deamon on your LPAR is adding the %. Cheers, Jantje. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN This e-mail transmission contains information that is confidential and may be privileged. It is intended only for the addressee(s) named above. If you receive this e-mail in error, please do not read, copy or disseminate it in any manner. If you are not the intended recipient, any disclosure, copying, distribution or use of the contents of this information is prohibited. Please reply to the message immediately by informing the sender that the message was misdirected. After replying, please erase it from your computer system. Your assistance in correcting this error is appreciated. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
