1

Topic: sending without smtp login

======== Required information ====
- iRedMail version (check /etc/iredmail-release): 0.9.0
- Linux/BSD distribution name and version: Ubuntu 12.04.5 LTS
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): LDAP
- Web server (Apache or Nginx): Apache
- Manage mail accounts with iRedAdmin-Pro? Yes
- Related log if you're reporting an issue:
====

Why its possible to send emails to local mail accounts by any outside smtp client without smtp login before? To email accounts on other mail server fails, because of Relay access denied, for sure.

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: sending without smtp login

Try to upgrade iRedAPD to the latest release (1.9.1), then enable its plugin 'reject_sender_login_mismatch' in /opt/iredapd/settings.py.

3

Re: sending without smtp login

ZhangHuangbin wrote:

Try to upgrade iRedAPD to the latest release (1.9.1), then enable its plugin 'reject_sender_login_mismatch' in /opt/iredapd/settings.py.

It is, but I configured to ignore my whole domain:

ALLOWED_LOGIN_MISMATCH_SENDERS = ['mydomain.com', 'shadowAddress']

Sorry, doesn't checked/remembered it before posting.

Tutorial: http://www.iredmail.org/docs/manage.iredapd.html

4

Re: sending without smtp login

Does it solve your issue?