I can send it to everyone like spoofing

[mrmarkuz (Markus Neuberger)]

Hi @Tyno,

as @davidep wrote:

@davidep

This is the NethServer sender policy: once authenticated the client can set any sender.

But there’s a feature request with a solution for your issue that seems to work with Thunderbird (but not with other mail webapps like Roundcube or Webtop):

Check authenticated user/identity before sending

I managed to have a working implementation, but it is just for fun Creating a simple panel to configure this behavior would be complex. Before proceed, you need to understand how it works, otherwise some users will not be able to send any mail. Take a look at: https://blog.felipe-alfaro.com/2006/02/19/block-sender-address-spoofing-with-smpt-auth/ So, let’s start. Configuration 1. Create a template-custom Execute: mkdir -p /etc/e-smith/templates-custom/etc/postfix/master.cf C…