Re: Mitigating From field spoofing (revised)

[lst_hoe02]

Zitat von Jack beanstallk <beansta...@gmail.com>:

Noel Jones <njones <at> megan.vbhcs.org> writes:

This is not something built into postfix.

As an alternative, use SPF and DKIM to detect forged mail claiming
to be from your own domain.

  -- Noel Jones

Just to clarify is this something that is not built into postfix
with my current use case?
i.e because the postfix server is not authenticating users
it's just a relayhost?

If I made users authenticate against the postfix server
first should options
such as reject_sender_login_mismatch do
what I am trying to achieve?

Regards

Andreas

This will check against the MAIL FROM smtp command, not the "From:" header. You might remove the header before cleanup and it will add this header with the information from the SMTP commands, but obviously not displayname and the like. Maybe someone has a smart regex which could do the job...

smime.p7s
Description: S/MIME Cryptographic Signature