OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Postfix smtp auth local users

From: Patrick Ben Koetter (pstate-of-mind.de)
Date: Wed Dec 01 2004 - 19:42:50 CST


* Charles Quesenberry <quesenberrypeak.org>:
> On Wed, 2004-12-01 at 18:34 -0600, Hector . wrote:
> > Sorry if I dont explain myself well,
> >
> > The problem that I have is the following one:
> >
> > If you have all the ldapīs mail account of my server, you can
> > configure an outlook and send mail from this account to all my
> > accounts in my ldap server (without auth).
> > I think that this is a great problem because for example, If you
> > know the big boss email (big.bossdomain1.com) you can configure you
> > outlook (or another email client) and send mail like big.boss to all
> > account mails of domain1.com and all domains in my ldap server
> > without auth.
> >
>
> I *think* I understand what you are asking. You want to know how to
> prevent a local user from forging the "From: " address. I do not know
> how to do that. Sorry. :(

Is that what you want? Postfix can do that.

prick

--
SMTP AUTH howto:
<http://postfix.state-of-mind.de/patrick.koetter/smtpauth/>
SMTP AUTH debug utility:
<http://postfix.state-of-mind.de/patrick.koetter/saslfinger/>