hi, I would like to use my exchange server as a relay for some un*x boxes but I would like to be sure that the From: field is correct by verifying it against the AD. is there a way to do that ? if not, is there at least a way to verify that this field is well formed (user@host.domain or better user@mydomain.com) ? TIA, Pierre.
On Wed, 24 May 2006 11:33:06 +0200, Pierre Bru wrote: >hi, > >I would like to use my exchange server as a relay for some un*x boxes >but I would like to be sure that the From: field is correct by verifying > it against the AD. > >is there a way to do that ? if not, is there at least a way to verify >that this field is well formed (user@host.domain or better >user@mydomain.com) ? > >TIA, >Pierre. Can I ask you to think about that question a little more. What is the point of having the SMTP interface do a lookup on a "mail from" command when that command is issued by a box that is under your control? There can only be legitimate mail coming from those boxes in a properly secured environment. You can't verify that the sender is valid because it comes from the unix box. You can make the unix box authenticate, that's a safer method of doing things.
Mark Arnold [MVP] wrote: > On Wed, 24 May 2006 11:33:06 +0200, Pierre Bru > wrote: > >> hi, >> >> I would like to use my exchange server as a relay for some un*x boxes >> but I would like to be sure that the From: field is correct by verifying >> it against the AD. >> >> is there a way to do that ? if not, is there at least a way to verify >> that this field is well formed (user@host.domain or better >> user@mydomain.com) ? >> >> TIA, >> Pierre. > > Can I ask you to think about that question a little more. > > What is the point of having the SMTP interface do a lookup on a "mail > from" command when that command is issued by a box that is under your > control? There can only be legitimate mail coming from those boxes in > a properly secured environment. if the unix user uses a MUA that allows to manually setup the from field (Mozilla for example), this user can setup whatever he/she wants, even a fake email address that noone will ever be able to reply to. I would like to avoid that. > You can't verify that the sender is valid because it comes from the > unix box. You can make the unix box authenticate, that's a safer > method of doing things. Pierre.
