On Wed, 14 Dec 2005, Ian Eiloart wrote:
>
> It's for these reasons that we don't reject Message Submissions that pass SMTP
> authentication. We bounce them to the authenticated user. That way, we can
> give a much better explanation of the problem.
Hmm, a nice idea. The problem with it is it becomes hard to reject
messages from users that have incorrectly configured sender addresses.
Exim can only do sender verification at ACL time, so you'd have to save
the result in a variable and re-check it in the routers. Yuck.
We actually have two outgoing relays: a message submission server (which
we are in the process of moving to securely authenticated access only -
9500 users to go!) and a general-purpose smart host (which will remain
unauthenticated for the forseeable future). The latter still needs to
reject at SMTP time in a manner that is most useful to the sender, even if
the former does not.
Tony.
--
<fanf@???> <dot@???>
http://dotat.at/ ${sg{\N${sg{\
N\}{([^N]*)(.)(.)(.*)}{\$1\$3\$2\$1\$3\n\$2\$3\$4\$3\n\$3\$2\$4}}\
\N}{([^N]*)(.)(.)(.*)}{\$1\$3\$2\$1\$3\n\$2\$3\$4\$3\n\$3\$2\$4}}
