Most email clients have the ability to create multiple identities or send from addresses. On my Postfix/Dovecot server, I was able to configure a setting so that any emails with a from address (envelope address?) that is not associated (by means of an appropriate virtual account mapping) to their local linux user account would be rejected when sending, and Roundcube would throw an error indicating this.
How can I do this with Exim on DirectAdmin? I've dug around and came up with these which are related, but I don't think address this particular issue:
My limited understand I think stems from authentication being required on my Postfix server. Note: I'm not talking about receiving email from a spoofed address, I mean sending email through the DA email server from Roundcube on the same server. These are the settings I'm using on Postfix:
* Restrict sending to alias mappings
sudo postconf -e 'smtpd_sender_login_maps=hash:/etc/postfix/virtual'
sudo postconf -e 'smtpd_sender_restrictions=reject_sender_login_mismatch'
I'm assuming this requires/forces authentication to be done when sending, even if the server is local.
How can I do this with Exim on DirectAdmin? I've dug around and came up with these which are related, but I don't think address this particular issue:
Can not prevent spoof mails.
I want to block unauthorized senders to send spam mails like [email protected] to [email protected] How can I block these senders? I tried: require verify = sender/callout But still recieve them. Any suggestion?
forum.directadmin.com
[Issue] Server accept email without SMTP Auth
Hi all, These few months, lot of client report that there are a lot of scam email saying their email account has been hacked and looking for bitcoin payment. Those email header said it sent by client email (e.g. [email protected]) and sent to client email as well. It is strange that email server...
forum.directadmin.com
DA sending mail from wrong email address
I don't know exactly since when this is happening, but some time ago this problem did not occur. When users create an account via my hosting script, all goes well. But when I login to my reseller account and create a new user account, the login credentials will also be send to my customer. So...
forum.directadmin.com
My limited understand I think stems from authentication being required on my Postfix server. Note: I'm not talking about receiving email from a spoofed address, I mean sending email through the DA email server from Roundcube on the same server. These are the settings I'm using on Postfix:
* Restrict sending to alias mappings
sudo postconf -e 'smtpd_sender_login_maps=hash:/etc/postfix/virtual'
sudo postconf -e 'smtpd_sender_restrictions=reject_sender_login_mismatch'
I'm assuming this requires/forces authentication to be done when sending, even if the server is local.