internal users spoofing

[landm]

Hi,

I would like to forbid my users send mails with different from than the authenticated user. Yes, it is not RFC, but some users "forget" their passwords and spammers use them.
I think the piece of code is:
deny
authenticated = *
condition = ${if eq {$authenticated_id}{${lc:$sender_address}}\
{no}{yes}}
message = rejected: You must send as the ID you authenticate with.

But I don't know where should be or whether I would use system filter.

Thank you in advanced,
LandM

 

[cPanelMichael]

Hello

Custom changes to the /etc/exim.conf file can be configured using:

"WHM Home » Service Configuration » Exim Configuration Manager >> Advanced Editor"

Thank you.

 

[landm]

Hi Michael,

Thanks, but what I need is to know where to put this piece of code. I try custom_begin_pre_recipient, but include incoming mails, and I need to apply only in auth messages.

Regards,
Lucas

 

[cPanelMichael]

You could try in the following section:

Section: ROUTERSTART

However, you may want to review the Exim documentation to determine a specific are where it should be used:

Exim Custom ACL

Thank you.