is it a good idea to enable smtp tweak and php_open_basedir tweak?
what are the pros and cons?
is it a good idea to enable smtp tweak and php_open_basedir tweak?
what are the pros and cons?
No real cons, only positives. If you force your users to authenticate it helps reduce spam. By enabling open_base it forces users to only be able to run scripts in their own directories. They can't access things normally from php/cgi like /usr/bin/gcc. It is just another line of security defense.
When you say authenticate are you referring to for example in Outlook, "server requires authentication" like that?
or is it referred to as "secure password authentication (SPA)"?
SMTP Authentification, my server requires
At the SMTP Tweak page the checkbox says:
_ Allow connections to localhost on port 25.
Is it more secure to allow or disallow?