Block sending e-mails from no user e-mail

[hape]

Hi,
on VPS with DA in Roundcube in settings>identities, users are able to add second e-mail which doesn't belong to them. How can I block users send messages from addresses that do not belong to them?

 

[zEitEr]

Hello,

Change $config['identities_level'] and add it to /var/www/html/roundcube/config/config.inc.php

// Set identities access level:
// 0 - many identities with possibility to edit all params
// 1 - many identities with possibility to edit all params but not email address
// 2 - one identity with possibility to edit all params
// 3 - one identity with possibility to edit all params but not email address
// 4 - one identity with possibility to edit only signature
$config['identities_level'] = 0;

and protect your modification through using custom/ directory in custombuild.

 

[hape]

Hi, thank you, but users can use own client and still modify sender.
Maybe: how to verify that smtp user match with envelope-from?

 

[zEitEr]

It has been already discussed here. So please use search function to find similar threads.