search

croessner / vrfydmn

Postfilx milter that rejects/fixes manipulated From:-header
GNU General Public License v3.0
14 stars 4 forks source link

Sender alignment check #7

Closed brueckner closed 9 months ago

brueckner commented 3 years ago

Contrary to the current options (LDAP, SQL or file based) we just needed a way to compare the From: header domain with the envelope sender domain. In case of a mismatch (like bad@intentions.com trying to send with a From: address like support@apple.com), the mail should be rejected.

I added a new option -A or —sender-alignment to the milter. Using the sender alignment option, you can run the milter without LDAP, SQL or a domain file. It will do the comparison and reject the mail in case of a mismatch between From: header domain and envelope sender domain.

We thought this may be helpful for other people, too. Happy about any suggestions or improvements!

croessner commented 3 years ago

You are looking for this:

https://gitlab.roessner-net.de/croessner/verifyemail

Right? If so, I would close this PR ;-)

brueckner commented 3 years ago

Well, not exactly (I think, unless I misunderstood the description). We're specifically looking for something to compare the domains, not the exact email address. However, this thing seems to be a more suited option for the verifyemail milter. Maybe it's worth porting?

Anyway, thanks for your work! :)

croessner commented 9 months ago

Sorry for the long delay. I have not done with the code for a very long time. Thanks for all your PRs!