Re: [exim] New compromise...?

> However - from my viewpoint, the Username used in the authentication
> "myclient@???" should be the same as the "From".. i.e. <=
> minanilo@???.
> Is there a neat way to drop emails when the "From" is not the same as
> the PLAIN authenticated name?

so some of the spammers will adapt and send matching. been down this
rabbit hole.

i do not allow passwords for shell and use the

server_condition = ${if crypteq{$auth3}{${lookup{$auth2}lsearch{/usr/local/etc/mailpass}}}}

putting only smtp senders in the auth file.

and then i monitor volume carefully and ring alarms

randy