Prevent header forgery

[Monis Monther]

Hi,

Is there a way to prevent users from changing the header. We do not want
the envelope to be different than the header. (i.e: header from must match
return-path).

I am able to achieve all kinds of restrictions in postfix restrictions and
restriction classes, but they all apply to the envelope, however when it
comes to the header From field, then that is part of the message and the
only place to write rules for it is header_checks. I could not find a way
in header_checks that can achieve this. It cannot match two different
fields and compare them.

Am I missing something, Does MailScanner have a way to force this.

I am using postfix 2.10.1 and MailScanner 5.0.07 and dovecot 2.2.10



-- 
Best Regards
Monis
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180902/a39528bd/attachment.html>