+++ Dave C. [exim-users] <22/07/01 10:11 -0400>:
> necesarrily contained in the headers. Exim is accepting a message from
> the user "wwwrun" (or whatever id...), and since unix systems typically
> are multiuser, and you dont normally want uses to be able to completely
After exim 3.20 there is untrusted_set_sender = yes. Or there's always
making wwwrun a trusted user - which wouldn't be recommended if that's the
user apache runs under on your box. If you have to set a trusted user, run
imp under some user (say IMP) and make that trusted.
> forge the origin of their email, it (like sendmail) is forcing the
> envelope sender to match the actual user logged in. Obviously in your
> case this is not desirable. If you tell exim to "trust" the webserver
It _is_ desirable. Or else, webmail users send mail with an envelope from of
(say) wwwrun@??? - which will generally not be acceptable to
most mailing lists out there.
-suresh
