Forcing authentication for local domains

[sargsyan.taron]

Today I noticed strange issue on my ispconfig 3 installation. After some debugging it was clear that anyone can send emails to local domains without authentication.

I checked main.cf and sow that smtp_senders_restriction pointing to mail_access table in ispconfig database. The issue is that table is empty and I'm not sure how to add record there through ispconfig interface.

Any thoughts??

Thanks in advance.

[till]

After some debugging it was clear that anyone can send emails to local domains without authentication.

Thats the case on every mailserver in the internet, so its not a issue. You mix up mail relaying which is secured by smtp-auth with the normal mail receiving process of a mta. If a authentication for local domains would be required, then your mailserver would not be able to receive any emails.

I checked main.cf and sow that smtp_senders_restriction pointing to mail_access table in ispconfig database. The issue is that table is empty and I'm not sure how to add record there through ispconfig interface.

Th mail_accesstable has to be empty for local domains, this table is only used to restrict emails forwards with transports.