I use reject_authenticated_sender_login_mismatch to control which
envelope sender addresses SASL clients can use. That works just fine.
Is there a similar way to control which envelope sender addresses can be
used by which system user by calling sendmail(1)?
(I seem to remember that there was a thread here about a similar subject
some time ago, but I can't find it now.)
I use authorized_submit_users which is much better than nothing, but the
more detailed control that reject_authenticated_sender_login_mismatch
provides for SASL would be nice to also have for sendmail(1) submission.
Or perhaps I've overlooked some good reason why it would be a bad idea
to control sendmail(1) submission in such detail?
--
Jesper Dybdal
https://www.dybdal.dk