1

How can I setup Exim to accept only authenticated email from managed domain address? I'm receiving spoofed email.. from myself.

Tobia
  • 1,210
  • 8
  • 37
  • 73

2 Answers2

1

In your case you can make a reasonable assumption that "real you" will never submit the message from the external MTA. So you can use the next ACL at the RCPT stage:

deny 
  sender_domains = +local_domains
  hosts          = !+relay_from_hosts
Kondybas
  • 6,864
  • 2
  • 19
  • 24
0

You can set up a suitable SPF record in your DNS that designates which hosts may send mail from your domain, and configure your mail host to check those SPF records.

wurtel
  • 3,806
  • 12
  • 15