linux...@gmx.net skrev den 2022-12-06 02:06:

I found that when a sasl user passed the authentication, it can send
email with any sender address, not only the sasl user itself.

This may cause our mailsystem to be abused.

How can I setup postfix to stop this behavior?

do you belive strongly that the From: header always is the sasl user abusing ?

if so change sasl user password and wait for custommers to confirm :)

that sayed there is only little postfix can do with it, as all other say if you want to make it stronger, it needs milters for this to happend

https://serverfault.com/questions/640756/postfix-login-mismatch-sender-address-rejected

Reply via email to