Re: [toaster] SMTP AUTH and authenticated sender

2007-08-03 Thread Muhammad Mukmin Pattikraton
On 8/3/07, Bill Shupp [EMAIL PROTECTED] wrote:
 On Aug 2, 2007, at 8:54 PM, Muhammad Mukmin Pattikraton wrote:

  Hello,
 
  I know when someone has authenticated via SMTP AUTH mechanism, he or
  she can send email with whatever sender address.
  My question, is there a way to restrict the sender address with the
  address that being used to authenticate ? Or at least restrict the
  domain.
 
  Any help would be appreciated. Thank you.

 /var/qmail/control/badmailto

 man -M /var/qmail/man qmail-smtpd

 Regards,

 Bill


Ok, I've read the documentation about badmailto but (please correct me
if i'm wrong) it's used to reject email with recipient address' listed
in it.

My problem is ...
Let's say Mr. Foo has an account [EMAIL PROTECTED] in Mail System A
with SMTP AUTH verification and vpopmail.
When Mr. Foo has succeeded to authenticate with [EMAIL PROTECTED] and
password *** , I want him can only send email with sender address
[EMAIL PROTECTED] And when he tries to use sender address
[EMAIL PROTECTED] when he had authenticated with [EMAIL PROTECTED],
the system will reject to relay so he could not fake the sender
address.
Is that possible to do that ?

Any help would be appreciated. Thank you.


Re: [toaster] SMTP AUTH and authenticated sender

2007-08-03 Thread Bill Shupp

On Aug 3, 2007, at 5:28 AM, Muhammad Mukmin Pattikraton wrote:


On 8/3/07, Bill Shupp [EMAIL PROTECTED] wrote:

On Aug 2, 2007, at 8:54 PM, Muhammad Mukmin Pattikraton wrote:


Hello,

I know when someone has authenticated via SMTP AUTH mechanism, he or
she can send email with whatever sender address.
My question, is there a way to restrict the sender address with the
address that being used to authenticate ? Or at least restrict the
domain.

Any help would be appreciated. Thank you.


/var/qmail/control/badmailto

man -M /var/qmail/man qmail-smtpd

Regards,

Bill



Ok, I've read the documentation about badmailto but (please correct me
if i'm wrong) it's used to reject email with recipient address' listed
in it.

My problem is ...
Let's say Mr. Foo has an account [EMAIL PROTECTED] in Mail System A
with SMTP AUTH verification and vpopmail.
When Mr. Foo has succeeded to authenticate with [EMAIL PROTECTED] and
password *** , I want him can only send email with sender address
[EMAIL PROTECTED] And when he tries to use sender address
[EMAIL PROTECTED] when he had authenticated with [EMAIL PROTECTED],
the system will reject to relay so he could not fake the sender
address.
Is that possible to do that ?

Any help would be appreciated. Thank you.


Sorry, I misread your query.  I'm not aware of how to do what you  
need.  However, the authenticated user will be embedded in the  
headers.  So it's not completely forged.


Bill