Check that local sender exists

[aleborg]

Hi,

we have some issues with spam sent through one of our servers, seems like they're sent through one of the users php-scripts. How can we make exim check that the sender exists on the server? We don't want it to require authentication for sending localy from the server but the sender address must exist on the server. Most of the spam has faked senders.

 

[nobaloney]

You can do this with some custom exim.conf changes. By sender I presume you mean the from address. There are many legitimate reasons why from addresses not really on the server should be able to send email through the server, including legitimate php scripts and mailing lists.

So you should think twice before you do this.

Jeff