Secure SMTP

Hello,
I use Exchange 2003 and i create a simple virtual SMTP with user's
authentification for my organisation. The trouble is that someone could be
authentied but i could put a wrong name and email in the outlook parameter,
so the mail could be send with the "director" 's email. Why Exchange
couldn't do a simple link between the MAIL FROM and the authentified's user
on this virtual smtp ?? Is there a way to program it with ESMTP ?
Thanks for helping me ...
Bye !

Ed
Fri Sep 23 15:10:31 CDT 2005

What you observe is simply a limitation in the SMTP protocol. If someone
spoofs an address like you describe, the Internet headers will show the IP
address of the sender, so you do have some evidence to use to trace the
offender. It's better to have all your users use MAPI and close off the use
of SMTP to internal users if there is too much risk for you in the use of
SMTP.
--
Ed Crowley
MVP - Exchange
"Protecting the world from PSTs and brick backups!"

"Ouba" <ouba974@mx.com> wrote in message
news:u3MeAfCwFHA.720@TK2MSFTNGP15.phx.gbl...
> Hello,
> I use Exchange 2003 and i create a simple virtual SMTP with user's
> authentification for my organisation. The trouble is that someone could be
> authentied but i could put a wrong name and email in the outlook
> parameter, so the mail could be send with the "director" 's email. Why
> Exchange couldn't do a simple link between the MAIL FROM and the
> authentified's user on this virtual smtp ?? Is there a way to program it
> with ESMTP ?
> Thanks for helping me ...
> Bye !
>

Lanwench
Sat Sep 24 09:36:44 CDT 2005



In news:u3MeAfCwFHA.720@TK2MSFTNGP15.phx.gbl,
Ouba <ouba974@mx.com> typed:
> Hello,
> I use Exchange 2003 and i create a simple virtual SMTP with user's
> authentification for my organisation. The trouble is that someone
> could be authentied but i could put a wrong name and email in the
> outlook parameter, so the mail could be send with the "director" 's
> email. Why Exchange couldn't do a simple link between the MAIL FROM
> and the authentified's user on this virtual smtp ?? Is there a way to
> program it with ESMTP ? Thanks for helping me ...
> Bye !

Replied in another group. Two, actually, IIRC....
Please don't multipost - if you need to post to multiple groups, it's best
to crosspost instead, by posting a single message to a handful of relevant
groups (separate the NG names with commas) so that everyone can follow the
thread. Thanks :-)

See http://www.blakjak.demon.co.uk/mul_crss.htm