internal users spoofing

Hi,

I would like to forbid my users send mails with different from than the authenticated user. Yes, it is not RFC, but some users "forget" their passwords and spammers use them.
I think the piece of code is:
deny
authenticated = *
condition = ${if eq {$authenticated_id}{${lc:$sender_address}}\
{no}{yes}}
message = rejected: You must send as the ID you authenticate with.

But I don't know where should be or whether I would use system filter.

Thank you in advanced,
LandM

 

Hi Michael,

Thanks, but what I need is to know where to put this piece of code. I try custom_begin_pre_recipient, but include incoming mails, and I need to apply only in auth messages.

Regards,
Lucas