RoundBox

[slug]

I have an issue with roundbox.
under settings->Identities


Issue:
I can add any email address I like, then have the server send it for me.

Ie:
I can add an identity like support@google.com
Then send mail from support@google.com
Most mail servers would block something like this as not being authentic. But, if I was sending email to a user on the same server the email would not be blocked.

suggestion: Disable adding new Identities in roundbox.

[Me.B]

roundbox? do you mean roundcube?

M B

[slug]

Yes, sorry about that.

Here is the fix:
in:
/etc/sentora/configs/roundcube/roundcube_config.inc.php
add this to the bottom of the file:

//identity level
$config['identities_level'] = 3;


or set it to 1 to allow different names and signature...