-SECTION(global, process)m4_dnl
-## Restrict users to plausible envelope sender addresses. This is
-## surprisingly fiddly. What I actually want to say is that the local part
-## must match ^$sender_ident(\$|-) and the domain part must match an
-## appropriate domain; but writing a conjunction is rather tricky. And so we
-## must burn some addresslist variables.
-addresslist wrong_local = ! +user_extaddr
-addresslist wrong_domain = ! *@+public
-addresslist wrong_address = +wrong_local : +wrong_domain
-untrusted_set_sender = : \
- ${if exists {CONF_sysconf_dir/auth-sender.conf} \
- {${lookup {$sender_ident} \
- lsearch {CONF_sysconf_dir/auth-sender.conf} \
- {$value}}}} : \
- ${LOOKUP_DOMAIN($sender_address_domain,
- {${if and {{match_local_part {$sender_ident} {+dom_users}} \
- {match_local_part {$sender_address_local_part} \
- {+dom_locals}}} \
- {*}}})} : \
- ! +wrong_address
-