On 14 May 2004 at 10:47, Bruce Richardson wrote about
"Re: [Exim] SMTP-Auth":
|...
| If you ban external smtp connections from sending mail with return paths
| and From: headers matching your own domain, you will then face a couple
| of problems, the most obvious and intractable of which being that your
| staff will not be able to sign up for external mailing lists.
But we're just talking about detected spoofed envelope senders, not
message headers. When I had this test in place, it caused no
problems with mailing lists, forwarded messages, etc.
The only false positive I saw was with confirmation messages from
fedex.com, which are legitimate and wanted but are (inexplicably)
sent with the recipient address spoofed into MAIL FROM.
- Fred
