On Fri, 13 Nov 2009, David B Funk wrote:
On Fri, 13 Nov 2009, John Hardin wrote:
Is there a way to configure sendmail to also validate both the envelope
sender and message From: header against the local passwd file?
Checking the envelope sender (for local domain addresses) against the
local passwd file is straightforward.
Got a URI for instructions? (for the OP's benefit)
Checking the From: header is do-able but would require writing custom
rules. (there is a mechanism for crafting explicit per-header rules.)
For either check you need to provide a broader scope to allow things
such as aliases (which usually aren't in your passwd file). Normally you
only do the local passwd file check at actual delivery time.
I don't think you'd worry about aliases checking the _sender_ address.
We are getting into "ask on the sendmail list" territory now.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
It is not the business of government to make men virtuous or
religious, or to preserve the fool from the consequences of his own
folly. -- Henry George
-----------------------------------------------------------------------
35 days since President Obama won the Nobel "Not George W. Bush" prize
