1

Topic: How to prevent users from using another identity

==== Required information ====
- iRedMail version (check /etc/iredmail-release):
- Linux/BSD distribution name and version:
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):
- Web server (Apache or Nginx):
- Manage mail accounts with iRedAdmin-Pro?
- Related log if you're reporting an issue:
======== Required information ====
- iRedMail version (check /etc/iredmail-release): 0.9.2
- Linux/BSD distribution name and version: Ubuntu 14.04 LTS
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): LDAP
- Web server (Apache or Nginx): Apache
- Manage mail accounts with iRedAdmin-Pro? No
- Related log if you're reporting an issue:
====

Hallo,

as I've already described in my previous forum post, we had users which were sending emails using another identity then their own. For example: The user with the email-address user1@example.com has been able to send emails as user2@example.com.

I've been able to stop this behaviour in Roundcube. But how can I prevent this generally with iRedMail?

Thanks in advance!

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: How to prevent users from using another identity

This is disabled with default iRedMail settings. To be more clear, it's controlled in Postfix setting:

smtpd_sender_restrictions = ..., reject_sender_login_mismatch, ...

FYI:
http://www.postfix.org/postconf.5.html# … n_mismatch

3

Re: How to prevent users from using another identity

Hi,

today we discovered that users can use a filter in Roundcube to send messages with a foreign identity. How can we stop this?

Thanks in advance!

4

Re: How to prevent users from using another identity

What filter are we talking about here? How to reproduce the issue?
You are replying a 6 years old post, please create a new forum topic with related Postfix log lines.