Context

There are many cases where SPOOF_PROTECTION should be enabled for some accounts, and not for others. For example, you may have standard user accounts where you want it enabled, however, there may be a system/application account which you'd like to be able to send as any address (for example, a single application which you want to allow sending as no-reply@foo.com and no-reply@bar.com, or other addresses like orders@foo.com, invoices@foo.com, etc.).

Description

I would like a way to selectively enable/disable spoofing per account. I understand that this is not likely something easily accomplished via environment variables, and adding dedicated setup scripts/etc would be a huge undertaking, but I would at least like to document a solution so others can easily implement this (here on GitHub or preferably on the web docs).

Mailu/Mailu#1096 (comment) seems like a similar issue.

Alternatives

• Creating accounts for each user and having the application log into each seperately
  • This is going to be an increasingly painful maintenance burden and result in a mess as an application grows, and would be totally unsuited for cases with dynamic email addresses

Applicable Users

Administrators of software which sends emails on behalf of multiple system accounts.

Are you going to implement it?

Yes, because I know the probability of someone else doing it is low and I can learn from it.

What are you going to contribute?

I would appreciate some guidance, but hopefully a solution that can be documented for others running into the same issue.