Authenticated users and spoofing

Discussion forum for Enterprise Edition.
Post Reply
mattko1
Posts: 4
Joined: Wed Mar 30, 2016 9:54 am

Authenticated users and spoofing

Post by mattko1 » Fri Jun 21, 2019 5:01 pm

Hi,

I wish to to *stop* authenticated users on my mail server from being able send email from @addresses which are not theirs.

Currently any authenticated users on my server can configure myname@domain.com in their outlook clients and send from me which isn't ideal.

I've checked the 'address spoofing protection' tab in SMTP settings and this is set to "Authenticated users can spoof sender address"

Ok so this makes sense that they can send from me.. BUT.. how can I turn it off? The other 2 options aren't what I want. I need to disable spoofing for all users, even authenticated users!

I've tried checking the "Authenticated senders must use the address from their postoffice" in the SMTP settings, but this just prevents me from sending any mail at all - despite the email address in my outlook client matching the mailbox. e.g. outlook: myname@mydomain.com > mailanble: /mydomain/mailboxes/myname - mapping appears fine.

I've tried several times with this setting enabled, and restarted SMTP service. I am definitely authenticating with the same details as the email address I'm trying to send from but SMTP just won't send.

I'm probably missing something. Does anyone know the correct config for this?

Cheers

Matt

eta
Posts: 2
Joined: Fri Apr 30, 2021 9:57 am

Re: Authenticated users and spoofing

Post by eta » Sun May 02, 2021 7:58 pm

Ho, I have the same issue, have you solved it?

Post Reply