> sorry i do not get this one. the recipient is local, what the heck does it > mean that the sender is local too. if you want auth even for local > accounts you've to set "mail-auth", but your server won't work on the > internet.
Yes, maybe it makes no sence that i write a mail from an local account to exactly the same account, but bad people are using that for spam, because they don't have to auth. xmail could force authentication if MAIL_FROM and RCPT are local and the same. i tested other mail servers, they behave like xmail, too. but i see a security hole in that behaviour. PS: Davide, i sent you a testmail over your server from [EMAIL PROTECTED] to [EMAIL PROTECTED] - maybe you now understand what i meant ;-) - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
