In an environment where there aren't any third parties sending email outside the server through the server, can SMTP AUTH and sending email via SMTP be turned off entirely?
The idea is scripts and php, etc. should still be able send email, but I am not sure if they go through SMTP AUTH ?
If so, can we just tell exim to only allow from 127.0.0.1 and the server IP and nothing else and disallow AUTH entirely?
Seems like just one more security hole and it should be locked to IP if possible.
The idea is scripts and php, etc. should still be able send email, but I am not sure if they go through SMTP AUTH ?
If so, can we just tell exim to only allow from 127.0.0.1 and the server IP and nothing else and disallow AUTH entirely?
Seems like just one more security hole and it should be locked to IP if possible.