Skip to content

Spoof failure with valid account and sender address #892

@johansmitsnl

Description

@johansmitsnl

@17Halbe introduced in #872 spoof protection but this fails with ldap accounts.

 Mar 11 09:30:44 mail postfix/submission/smtpd[1874]: NOQUEUE: reject: RCPT from unknown[172.16.38.1]: 553 5.7.1 <[email protected]>: Sender address rejected: not owned by user [email protected]; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<macbook>

The email server has mail.domain.net as the hostname and the email address is [email protected]. It verifies with my username and mail host domain to verify the sender address.

This is incorrect because it should check if the email address matches what is in the ldap as the mail field or mailalias fields.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions