Julian <julian@???> probably said:
> of this - admittedly an idea which hadn't occured to me was to use a setuid
> trusted program between the user and exim. However whilst flexible that
> strikes me as being icky - part of the point of using such a wonderful
> mailer as exim is to avoid having to do things like that.
:)
> Your second idea is a lot better, and to my mind looks a lot more promising,
> I think I can either get it to always rewrite the 'from' domain that any
> user sends out according to a lookup in a table, or alternatively only allow
> from domains for a specific user according to a match from a lookup.
Yep, thats what I'd tend towards.
> The reason that I am doing it like this, rather than getting them to relay
> is that I don't want to allow them complete freedom, I merely wish to allow
> these users some flexibility.
I wasn't suggesting that they relay, i was pointing out that you shouldn't
spend _too_ much time making it perfectly secure, since relaying to
fake email is trivial.
P.
--
pir pir@??? pir@??? pir@???
--
*** Exim information can be found at
http://www.exim.org/ ***
