[rt-users] Allow complete Domain access to RT

2011-03-25 Thread Lars Reimann 

Hey all,

just a little question before the weekend:

Does RT support the possibility to grant everyone sending email from a 
specific domain (e.g. *@example.org) the right to post to a specific queue?


In my opinion this could be a minor security risk using forged sender 
addresses.


Btw, can you think of, or have in place any other protection mechanisms 
to prevent acceptance of forged sender addresses?


greetings,
l.r.

Re: [rt-users] Allow complete Domain access to RT

2011-03-25 Thread Shawn M Moore 

(11/03/25 6:32), Lars Reimann wrote:

Hey all,

just a little question before the weekend:

Does RT support the possibility to grant everyone sending email from a
specific domain (e.g. *@example.org) the right to post to a specific queue?


Yes, using trivial mail filtering.


In my opinion this could be a minor security risk using forged sender
addresses.

Btw, can you think of, or have in place any other protection mechanisms
to prevent acceptance of forged sender addresses?


RT supports GnuPG pretty well. perldoc lib/RT/Crypt/GnuPG.pm has a lot 
of information about it.



greetings,
l.r.