Re: how to prevent post-auth sender spoofing

On Wednesday 16 June 2010 20:14:35 Josephus wrote:
> I have found all the solutions in postfix very difficult to implement or
> resource consuming,

yeh - nothing seamed to be really pretty. I'm glad you persevered with a lua
solution.

> so I decided to write a setup Lua script instead,
> which does the following:
> - verifies incoming mail
> - signs mail if sasl username equals to envelope from and header from
> addresses
> - checks for additional allowed sender addresses using an sql query
> - rejects if the above tests fail
> You can fetch it from here: http://pastebin.ca/1884205
>
> Since you probably want to implement a decision logic slightly different
> than this one, it would be wise to keep this kind of modifications in
> Lua script hooks as they are very fast and easy to implement.
>
> BR,
> Jos
>

This looks really nice. I'll probably commit it to the contrib directory
unless you have objections. I'll put come credits to you in the file and some
doco.

Thanks.

Daniel
Received on Wed Jun 16 2010 - 13:50:17 PST