Univention Bugzilla – Bug 48629
Postfix allows to send mails even if no mailPrimaryAddress is specified in LDAP
Last modified: 2021-05-03 21:58:14 CEST
Currently postfix allows a SMTP login via $UID even if no mailPrimaryAddress is specified for that user object in LDAP. Like any other UCS user with mailPrimaryAddress, the user is able to send mails with an arbitrary sender address. The respective user account can only be identified via the mail.log file but not via mail headers.
Would fixing Bug #40609 fix this, too?
(In reply to Ingo Steuwer from comment #1) > Would fixing Bug #40609 fix this, too? Not sure about the current implementation, but it could be used to to prevent this scenario.