On Wed, Nov 07, 2001 at 09:29:47AM +0000, Nigel Metheringham wrote:
> Maybe a more interesting method is allow mangling of the sender address
> *as* long as the sender address maps back (when run through the address
> verify code) to the same user as the invoker.
This sounds like a terrible idea:
1) you would need a localuser equivalent director.
2) you could easily bypass these checks with an SMTP connection to the
appropriate place.
It just ends up giving you a false sense of security. Plus your outbound
mail-server would need to be your inbound one, or have the same director
and router set.
MBM
--
Matthew Byng-Maddick <mbm@???> http://colondot.net/
