[exim] Re: Sanity check: ACL to block fake sender addresses

Startseite
Nachricht löschen
Nachricht beantworten
Autor: Roger Håkansson
Datum:  
To: exim-users
Betreff: [exim] Re: Sanity check: ACL to block fake sender addresses
Roger Håkansson wrote:
> I've noticed that a lot of connections from spammers trying to send mail
> to local users claiming the sender is another local user.
>
> So I want to check that if sender domain name is in sender_local_domains
> the user must be authenticated or host must be in relay_from_hosts.
>
> Does this look correct?
>
> acl_smtp_mail:
> # Accept all authenticated connections
>   accept  authenticated = *
> # Accept all local hosts
>   accept  hosts         = +relay_from_hosts
> # Deny if sending host claims to be a local user
>   deny    sender_domains = +sender_local_domains
>           message       = Fake sender address
> # Accept all other
>   accept


Forgot to mention, all other sender/recipient verification is done in
acl_check_rcpt just like the default "configure"

--
Roger Håkansson