Can I reject when sender doesn't appear in from: header?

2014-03-27 Thread Adam Moffett
I'm seeing messages occasionally where the envelope sender is a verifiable address at someone else's domain, but the from: header contains some non-existent user @ our local domain. Can postfix reject those messages? Can postfix perform address verification on from: or reply-to: headers?

Re: Compromised Passwords

2014-03-06 Thread Adam Moffett
Homer: Two steps eliminated this problem for us: 1) Accounts with more than 6 failed login attempts in a 10 minute period are disabled for 10 minutes. This makes brute force methods to find passwords almost impossible. 2) Limit to 200 outgoing messages per day per user. We'll raise it to

Re: Is it possible to verify "from:" header addresses?

2013-12-16 Thread Adam Moffett
This is not built-in. You can try to do this with a number of extension mechanisms: - header_checks with a socketmap: or tcp: based lookup table. Return REJECT for mail that you don't want. - External content-filter plugin (Milter, amavisd-new, etc.). Milters can be written in Python and ot

Re: Is it possible to verify "from:" header addresses?

2013-12-16 Thread Adam Moffett
We're doing sender verification for our local domains, so a message sent from "f...@plexicomm.net" gets rejected. A message with an envelope sender of "va...@spammer.com" with a from: header of "f...@plexicomm.net" gets accepted. Is there a way to enable verification on "from:" header addresses

Re: Is it possible to verify "from:" header addresses?

2013-12-16 Thread Adam Moffett
We're doing sender verification for our local domains, so a message sent from "f...@plexicomm.net" gets rejected. A message with an envelope sender of "va...@spammer.com" with a from: header of "f...@plexicomm.net" gets accepted. Is there a way to enable verification on "from:" header address

Is it possible to verify "from:" header addresses?

2013-12-13 Thread Adam Moffett
We're doing sender verification for our local domains, so a message sent from "f...@plexicomm.net" gets rejected. A message with an envelope sender of "va...@spammer.com" with a from: header of "f...@plexicomm.net" gets accepted. Is there a way to enable verification on "from:" header address