Topic: ALLOWED_LOGIN_MISMATCH_SENDERS secure ?
==== Required information ====
- iRedMail version (check /etc/iredmail-release): 0.9.7
- Linux/BSD distribution name and version: CENTOS 7
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): LDAP
- Web server (Apache or Nginx): APACHE
- Manage mail accounts with iRedAdmin-Pro? NO
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====
Hello,
I my domain i have some email like support@mydomain.com with are shared between users as public mailbox (https://docs.iredmail.org/public.folder.html)
For some users i introduced sending emails as support@mydomain.com
by setup https://docs.iredmail.org/allow.certain … .user.html
Everything works fine, but now every one who exist in array ALLOWED_LOGIN_MISMATCH_SENDERS
can send email as any in my domain.
Is there any possibility to secure this ?
I would like to be sure that every authorized user will be able to send email only as support@mydomain.com
Regards,
Dawid
----
Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.