> On Jan 7, 2017, at 10:07 AM, Christoph Pleger <[email protected]> wrote:
> 
> I do not understand the difference between reject_sender_login_mismatch and 
> reject_known_sender_login_mismatch.
> 
> The documentation says about reject_known_sender_login_mismatch:
> 
> Apply the reject_sender_login_mismatch restriction only to MAIL FROM 
> addresses that are known in $smtpd_sender_login_maps.

This allows authenticated users to send from any address that is not
listed with an explicit owner in the sender login table.

> And about reject_sender_login_mismatch, it says:
> 
> Reject the request when $smtpd_sender_login_maps specifies an owner for the 
> MAIL FROM address, but the client is not (SASL) logged in as that MAIL FROM 
> address owner; or when the client is (SASL) logged in, but the client login 
> name doesn't own the MAIL FROM address according to $smtpd_sender_login_maps.

This does not allow authenticated users to send from addresses they
do not own.

-- 
        Viktor.

Reply via email to