Re: [vchkpw] validate from

2005-12-06 Thread Boris Pavlov

Hi,

And how the name/account under which the user gained access to send mail 
will appear in the Received headers?


Tom Collins wrote:


On Oct 25, 2005, at 8:35 AM, Ingo Claro wrote:

How can I do that with smtp auth qmail validates that the from must 
be the

same that the auth user?

the idea is to avoid some user  [EMAIL PROTECTED]  can impersonate 
another

user and send mails with another from:  [EMAIL PROTECTED], I only want to
admit him to send emails with from: [EMAIL PROTECTED], being 
domain.com  a

local domain.



No current way to do it.

Note though, that if smith pretends to be jones, his name will appear 
in the "Received:" headers of the message.


If you try to force the SMTP AUTH username to be the same as the MAIL 
FROM, then smith can just send his forged e-mail from another server.


--
Tom Collins  -  [EMAIL PROTECTED]
QmailAdmin: http://qmailadmin.sf.net/  Vpopmail: http://vpopmail.sf.net/
You don't need a laptop to troubleshoot high-speed Internet: sniffter.com





Re: [vchkpw] validate from

2005-10-25 Thread Tom Collins

On Oct 25, 2005, at 8:35 AM, Ingo Claro wrote:
How can I do that with smtp auth qmail validates that the from must be 
the

same that the auth user?

the idea is to avoid some user  [EMAIL PROTECTED]  can impersonate 
another

user and send mails with another from:  [EMAIL PROTECTED], I only want to
admit him to send emails with from: [EMAIL PROTECTED], being domain.com 
 a

local domain.


No current way to do it.

Note though, that if smith pretends to be jones, his name will appear 
in the "Received:" headers of the message.


If you try to force the SMTP AUTH username to be the same as the MAIL 
FROM, then smith can just send his forged e-mail from another server.


--
Tom Collins  -  [EMAIL PROTECTED]
QmailAdmin: http://qmailadmin.sf.net/  Vpopmail: http://vpopmail.sf.net/
You don't need a laptop to troubleshoot high-speed Internet: 
sniffter.com