SMTP authentication

[nozom]

Hi There

First post (wohoo)

I'm running a WHM server and would like to force all email clients to authenticate themselves when sending an email. At the moment, anyone who wants to send an email just whacks in mail.mydomain.etc.. and is able to send.

Is there a way i can force this across all the sites on my WHM or do it one at a time in cpanel?

Thanks,
Nozom

[chirpy]

Not just anyone can send through the server. Exim is configured by default to allow two types of authentication to relay:

1. POP before SMTP, where the client must POP their email account and they can then send an email through the server (relay) for a period of 30 minutes from the same IP address before they must POP again.

2. Using SMTP AUTH, where they login to the SMTP server using their email account/password each time to relay

[chirpy]

They are both on by default, there's nothing you need to do to enable them.

[nozom]

Thanks for the very swift response

I think i need SMTP AUTH, is there an easy way to turn this on or is it a case of fiddling around in the exim edit bit on WHM?

Ta,
nozom

[nozom]

Problem is it seems someone is using our server to relay spam, is there anything i can do to stop it?

[chirpy]

That is more likely being done through a compromised php script, which is very popular these days, especially through old installations of phpBB and phpNuke. You'll need to ensure that any installations of, in particular, those two apps, and in general any php and perl software, are up to date. In the case of phpBB - v2.0.16.

[nozom]

hmm, the only thing i've got running is indeed phpbb 2.011, time for an upgrade!

Cheers,
nozom