Question How to prevent logged users from sending email from a different account in the server

[Jose Maria Sarachaga]

Hi

I see in Postfix a logged in postfix user is able to send email with any From: address they want, they could even send from another domain on the same server.

Is it possible to prevent this?
Regards

 

[Martin Dias]

There are some tips here regarding that:

Does postfix reject spoofed senders?

Is there a reliable way to reject incoming mails with a spoofed e-mail address? What kind of checks does postfix run normally on incoming mails? does postfix check the reverse dns by default? does

serverfault.com

 

[mow]

I see in Postfix a logged in postfix user is able to send email with any From: address they want, they could even send from another domain on the same server.

Is it possible to prevent this?

Not easily.
But a mail that is sent with a From: not matching the authenticated user should have a Sender: line added by postfix.