Home » Kerio User Forums » Kerio Connect » Users able to send as other accounts in Outlook 2011 (send on behalf )

Messages: 21
Karma: 1
Send a private message to this user
I have some users who, when they compose an email, get the option of sending it from the account of different users in our company. I know you can spoof email addresses easily enough but that's not my concern. Users are able to send as accounts that they aren't even a delegate for. I just don't want my users to keep seeing this each time they write an email. It's similar to the issue discussed here- http://forums.kerio.com/t/19517/outlook-2011-shared-calendar s-in-7-2-beta-6-unwanted-side-effect-/

The problem is that I don't see anything in my config file that matches the fix which was supposed to have been addressed with 7.4.

Yes, install Kerio Connect 7.4.0...

Technical background:
In file mailserver.cfg in table EWS is variable AllowUnauthorizedSubmission with default value "0"
Similar variable exists for Entourage (WebDAV) in table HTTP, name WebDAVStrictFromAddress since Kerio Connect 7.1.0"

The server is Kerio 8.2.2 on Mac OS 10.8.5.
Pavel Špalek (Kerio)

Messages: 270
Karma: 37
Send a private message to this user
If you don't want users to be able to send message on behalf of other users, you must enable anti-spoofing:
http://kb.kerio.com/product/kerio-connect/server-configurati on/security/configuring-anti-spoofing-in-kerio-connect-1491. html
The second address when sending e-mail is added if user has mapped other user's folder or delegation configured. It's Outlook feature that doesn't depend on Connect.

Pavel Špalek
developer - Kerio Connect
Previous Topic: Cross Platform screen sharing
Next Topic: Help with Error log entries
Goto Forum:

Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Sat Nov 17 04:06:11 CET 2018

Total time taken to generate the page: 0.75812 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.