fripost-ansible/roles/MSA/etc/systemd/system, branch master Fripost ansible scripts move postfix-sender-login.{service,socket} to files/. 2017-06-02T12:12:32+00:00 Guilhem Moulin guilhem@fripost.org 2017-06-02T12:12:26+00:00 1395cc86969823d9972517833c614becba8660a0 






Don't let authenticated client use arbitrary sender addresses.
2017-05-31T23:09:00+00:00

Guilhem Moulin
guilhem@fripost.org

2017-05-31T19:42:32+00:00

6e39bad3fbe75b88fca4c2e2aad8eb51af14b1be

The following policy is now implemented:

    * users can use their SASL login name as sender address;
    * alias and/or list owners can use the address as envelope sender;
    * domain postmasters can use arbitrary sender addresses under their
      domains;
    * domain owners can use arbitrary sender addresses under their domains,
      unless it is also an existing account name;
    * for known domains without owner or postmasters, other sender addresses
      are not allowed; and
    * arbitrary sender addresses under unknown domains are allowed.





The following policy is now implemented:

    * users can use their SASL login name as sender address;
    * alias and/or list owners can use the address as envelope sender;
    * domain postmasters can use arbitrary sender addresses under their
      domains;
    * domain owners can use arbitrary sender addresses under their domains,
      unless it is also an existing account name;
    * for known domains without owner or postmasters, other sender addresses
      are not allowed; and
    * arbitrary sender addresses under unknown domains are allowed.