Release 7.2.6_GA_2926.UBUNTU8 UBUNTU8 FOSS edition.
Release 8.0.7.GA.6020.UBUNTU12.64 UBUNTU12_64 FOSS edition.
To the System registered users can set any from address.
"firstname.lastname@example.org" can send an mail as "email@example.com"
The "sending mails from all address" in the functions tab is not set.
This becomes more and more a problem if a users password gets hacked in some way.
The spammer then uses the account to send mails with any "from" address.
Sometimes only the string bevore the @ gets changed (firstname.lastname@example.org, email@example.com, ...)
Sometimes the whole address gets changed.
This is realy funny if the mailq is 10k mails long and you search the account from which the mails come from.
Is there any way to limit the sender address?
The user "firstname.lastname@example.org" should only have the posibility to send as "email@example.com".