I just installed sentora on a fresh vps to play around with and learn.
Something i found a bit disturbing is that out of the box sentora configs postfix to allow anyone to send email to your own domains.
For an example
domain.ltd is added
i create mailbox mail1@domain.ltd
by using a simple script iam now able to send spam from any host to my sentora as long as i send from mail1@domain.ltd and send to mail1@domain.ltd or well from mail1@domain.ltd to any existing email adress under domain.ltd
Is there a way to only accept outgoing mail from "clients" that been authenticated through sasl ?
Something i found a bit disturbing is that out of the box sentora configs postfix to allow anyone to send email to your own domains.
For an example
domain.ltd is added
i create mailbox mail1@domain.ltd
by using a simple script iam now able to send spam from any host to my sentora as long as i send from mail1@domain.ltd and send to mail1@domain.ltd or well from mail1@domain.ltd to any existing email adress under domain.ltd
Is there a way to only accept outgoing mail from "clients" that been authenticated through sasl ?
