Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 2 > General

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 17th January 2007, 19:30
alexillsley alexillsley is offline
Senior Member
 
Join Date: Dec 2006
Posts: 396
Thanks: 27
Thanked 3 Times in 3 Posts
Default Smpt

Hey,
How can i disable SMPT for some users?
Thanks,
Alex
Reply With Quote
Sponsored Links
  #2  
Old 17th January 2007, 20:12
martinfst martinfst is offline
Senior Member
 
Join Date: Dec 2006
Location: Hilversum, The Netherlands
Posts: 880
Thanks: 1
Thanked 18 Times in 17 Posts
Send a message via MSN to martinfst Send a message via Skype™ to martinfst
Default

You can't. if you use authentication, only authenticated users can use your smtp daemon
Reply With Quote
  #3  
Old 17th January 2007, 20:22
alexillsley alexillsley is offline
Senior Member
 
Join Date: Dec 2006
Posts: 396
Thanks: 27
Thanked 3 Times in 3 Posts
Default

will this stop them from using the php mail() command
Reply With Quote
  #4  
Old 17th January 2007, 20:27
martinfst martinfst is offline
Senior Member
 
Join Date: Dec 2006
Location: Hilversum, The Netherlands
Posts: 880
Thanks: 1
Thanked 18 Times in 17 Posts
Send a message via MSN to martinfst Send a message via Skype™ to martinfst
Default

Ah, a possible script vulnerability. No, it will not stop php mail() to local domains/users. But depending on your setup, you can enforce authentication. As long as you have that you're oke.
Are some scripts being abused on your system? You should track down the offending script and remove it from your system, no matter how hard the user/owner of that website complains. Tell him you don't allow broken scripts for the sake of all the users on your system.
Reply With Quote
  #5  
Old 17th January 2007, 20:44
alexillsley alexillsley is offline
Senior Member
 
Join Date: Dec 2006
Posts: 396
Thanks: 27
Thanked 3 Times in 3 Posts
Default

No, one is currently abusing the system, i just want to prevent anyone from possibly in the future trying to. Dont want any spam mailers on my system

Could you explain to me how to add authentication? I would like my site and a few others sites of people i trust to be allowed to send mail but not anyone else

Thanks,
Alex
Reply With Quote
  #6  
Old 18th January 2007, 20:44
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,722 Times in 2,563 Posts
Default

Quote:
Originally Posted by alexillsley
Could you explain to me how to add authentication? I would like my site and a few others sites of people i trust to be allowed to send mail but not anyone else

Thanks,
Alex
You could remove 127.0.0.0/8 from the mynetworks line in /etc/postfix/main.cf. That way even localhost and therefore all PHP scripts, webmail applications, etc. would have to authenticate to send mail.
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #7  
Old 18th January 2007, 22:15
alexillsley alexillsley is offline
Senior Member
 
Join Date: Dec 2006
Posts: 396
Thanks: 27
Thanked 3 Times in 3 Posts
Default

How would you authenticate when sending mail, e.g a php script?
Reply With Quote
  #8  
Old 18th January 2007, 22:37
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 35,451
Thanks: 813
Thanked 5,221 Times in 4,092 Posts
Default

Quote:
Originally Posted by alexillsley
How would you authenticate when sending mail, e.g a php script?
The PHP mail function is not able to authenticate itself, you must use a PHP email class for sending mails that supports smtp authentication.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #9  
Old 18th January 2007, 22:39
alexillsley alexillsley is offline
Senior Member
 
Join Date: Dec 2006
Posts: 396
Thanks: 27
Thanked 3 Times in 3 Posts
Default

Would the webmail "UebiMiau!" still work? Would it be easy to add users + passwords?
Reply With Quote
  #10  
Old 18th January 2007, 22:51
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 35,451
Thanks: 813
Thanked 5,221 Times in 4,092 Posts
 
Default

Quote:
Originally Posted by alexillsley
Would the webmail "UebiMiau!" still work?
I guess you would have to reconfigure UebiMiau.

Quote:
Would it be easy to add users + passwords?
Generally every mailuser in ISPConfig can send mail, so its just enough to create a user and use this username and password for sending mail.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT +2. The time now is 14:28.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.