15 messages in net.sourceforge.lists.courier-usersRE: [courier-users] courier and smtp-...
FromSent OnAttachments
Dario AlonsoOct 8, 2003 8:37 am 
Anand BuddhdevOct 8, 2003 8:58 am 
Gordon MessmerOct 8, 2003 12:09 pm 
Dario AlonsoOct 8, 2003 2:02 pm 
Dario AlonsoOct 8, 2003 2:04 pm 
Bowie BaileyOct 8, 2003 2:49 pm 
Jeff JansenOct 8, 2003 2:50 pm 
Dario AlonsoOct 8, 2003 2:58 pm 
Roger B.A. KloreseOct 8, 2003 3:07 pm 
Gordon MessmerOct 8, 2003 3:14 pm 
Sam VarshavchikOct 8, 2003 3:53 pm 
martinOct 9, 2003 6:20 am 
Dario AlonsoOct 9, 2003 1:38 pm 
Dario AlonsoOct 9, 2003 1:41 pm 
martinOct 10, 2003 5:30 am 
Actions with this message:
Paste this link in email or IM:
Paste this link in email or IM:
Atom feed for this thread
Paste this URL into your reader:
Subject:RE: [courier-users] courier and smtp-authActions...
From:Roger B.A. Klorese (rog@queernet.org)
Date:Oct 8, 2003 3:07:42 pm
List:net.sourceforge.lists.courier-users

Yes, anyone should be able to send mail to users in my domain, that's right... but the problem is with the "jokers". i.e. one valid user, user1, want's to send a fake mail to user2. He could create one fake account (user3) from my domain in his MUA (evolution, kmail, etc...), and not use authentication for smtp. He could send without problems a mail from user3@mydomain to user2@mydomain That is what it seems to me. Can be avoided that?

And he can still do that. Authentication doesn't set his From: header.

All you've gained is a logged authentication to check it against.