On 2022-03-14 03:42, Jaroslaw Rafa wrote:
Looks like a job for identd. You have to set up identd on your server and
make the Postfix service on port 2525 to ask identd about the userid of
connecting process. If it's not setroubleshoot, you should reject the
connection.
That's an interesting ide
On 2022-03-14 07:34, Wietse Venema wrote:
I see that the sender runs on the same machine as Postfix. Can the
sender be configured to use /bin/mail, mailx, or /usr/sbin/sendmail
instead of using SMTP?
Submission through /usr/sbin/sendmail (and therefore /bin/mail and
mailx) can be restricted with
Matt Kinni:
> My goal is to carve out an exception for this process that doesn't
> compromise the overall security of my server, or allow any local users
> to spoof the FROM address of any other user without needing to login
> (whilst allowing setroubleshootd to do exactly that).
>
> The soluti
Sorry, sent to the sender instead of the list. Resending.
Dnia 13.03.2022 o godz. 22:48:37 Matt Kinni pisze:
>
> My goal is to carve out an exception for this process that doesn't
> compromise the overall security of my server, or allow any local
> users to spoof the FROM address of any other use
