Code Crafters

Hi there,

I made sure that Enabled SMTP Authentication is checked, but still anyone can connect and send mail via my SMTP service... Makes sense? Is there anything else I should check? If you want I can email you my server login details for you to review and tell me what you think.

Thanks in advance!
David.

The only thing that can bypass SMTP authentication is relaying safe IPs (same settings page). Otherwise, only users with login details are allowed to relay mail. Note that anyone is always allowed to send to your local addresses otherwise mail wouldn't be delivered to you. It is only external email addresses that need relaying via outgoing mails that require SMTP authentication. If you send me your domain to chris@code-crafters.com I'll run some security tests on your SMTP connection. If you want, you can also send me your remote admin login details and remote admin port and I'll have a quick look over all your main security settings.