1

How can I setup Exim to accept only authenticated email from managed domain address? I'm receiving spoofed email.. from myself.

Tobia
  • 1,272
  • 9
  • 41
  • 81

2 Answers2

1

In your case you can make a reasonable assumption that "real you" will never submit the message from the external MTA. So you can use the next ACL at the RCPT stage:

deny 
  sender_domains = +local_domains
  hosts          = !+relay_from_hosts
Kondybas
  • 6,964
  • 2
  • 20
  • 24
0

You can set up a suitable SPF record in your DNS that designates which hosts may send mail from your domain, and configure your mail host to check those SPF records.

wurtel
  • 3,864
  • 12
  • 15