Facebook
TwitterCalibeR.50
New Pleskian
Hi,
how can I prevent users from sending mail as a different account than they are authenticated as?
Example:
Webspace example.com has a mail account test@example.com
Webspace whatever.com has a mail account test@whatever.com
Both webspaces are sharing the same IP
It's now possible for either accounts to spoof the other account, for example the user of test@whatever.com can send emails with "test@example.com" in the from header. It's also possible to send as non existent accounts and even domains.
Is there any option to prevent this?
how can I prevent users from sending mail as a different account than they are authenticated as?
Example:
Webspace example.com has a mail account test@example.com
Webspace whatever.com has a mail account test@whatever.com
Both webspaces are sharing the same IP
It's now possible for either accounts to spoof the other account, for example the user of test@whatever.com can send emails with "test@example.com" in the from header. It's also possible to send as non existent accounts and even domains.
Is there any option to prevent this?
