You are viewing a plain text version of this content. The canonical link for it is here.
Posted to server-user@james.apache.org by Okan Cetin <ok...@gmail.com> on 2008/05/16 12:36:31 UTC

Controling fake mails?

I want to catch all mail that sent to test@test.com and at the same time a
filtering mechanism must be run against to fake mails.
Simply, i can send a mail from billgates@linux.com to test@test.combut
actually i am not
billgates@linux.com.
In other word I want james to accecpt only authorized mails.

Thanks ,
Okan.

-- 
~
otomatik olusturuldu:
http://ocetin.net/log

Re: Controling fake mails?

Posted by David Legg <da...@searchevent.co.uk>.
Hi Okan,

> Simply, i can send a mail from billgates@linux.com to test@test.combut
> actually i am not billgates@linux.com.
> In other word I want james to accecpt only authorized mails.


I'm assuming that your server is not set up as an 'open relay' as that 
would be bad!

What I think is happening is that if I were to try to send email through 
your server it should challenge me with a password.  If I knew the 
password then the system allows me to send email to anyone and 
furthermore it doesn't care who I say I am.  If you want to stop that 
happening then you need to set the verifyIdentity tag in your config.xml 
file: -

   ...
   <smtpserver enabled="true">
      ...
      <handler>
         ...
         <verifyIdentity>true</verifyIdentity>
         ...
      </handler>
   </smtpserver>
   ...

When set to 'true' the verifyIdentity setting will ensure that the Mail 
From: field matches who I said I was when I gave my password and 
authenticated.

Regards,
David Legg


---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
For additional commands, e-mail: server-user-help@james.apache.org