We also have users that are on mailing lists at other companies, where
   said list is a simple alias.
   ...
   Better to just educate the users that from addresses are (obviously)
   trivial to forge.

One can do way better than that -- simple application of sender_canonical_
maps can turn any "forged" or relayed-via-external-points sender addresses
into something VERY OBVIOUSLY from the outside. I.e. let the envelope
and From: headers in, but spray-paint them bright red on the way.

regexp:canonical ...
/(..*)mycompany.com$/ OUTSIDE-$1NOT-REALLY-mycompany.com

_H*
-
To unsubscribe, send mail to majordomopostfix.org with content
(not subject): unsubscribe postfix-users

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]