On Fri, 2009-11-13 at 13:58 -0600, David B Funk wrote: > On Fri, 13 Nov 2009, John Hardin wrote: > > > Is there a way to configure sendmail to also validate both the envelope > > sender and message From: header against the local passwd file? > > Checking the envelope sender (for local domain addresses) against the > local passwd file is straightforward. Checking the From: header is > do-able but would require writing custom rules. (there is a mechanism > for crafting explicit per-header rules.) > > For either check you need to provide a broader scope to allow things > such as aliases (which usually aren't in your passwd file). Normally > you only do the local passwd file check at actual delivery time. > Or switch to Postfix, which has a built-in ability to check local senders against the password and aliases files.
However, the docs don't say whether its checking the envelope sender and/or the From: header. Martin
