The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

possible to require authentication for outgoing email?

Discussion in 'Security' started by lcdservices, Aug 7, 2014.

  1. lcdservices

    lcdservices Registered

    Joined:
    Aug 7, 2014
    Messages:
    3
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Reseller Owner
    we've had some issues with malicious scripts sending spam from the server. I've tracked down the offending scripts and (hopefully) removed all traces. but I'm taking this opportunity to harden the system.

    I'd like to enforce a policy that all outgoing mail through accounts must authenticate. currently, mail can be sent from website scripts via localhost without authentication. but for the life of me, I can't find any setting in WHM that would allow me to require that. is it simply not there? or am I missing it?
     
  2. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,854
    Likes Received:
    676
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    Hello :)

    You can use the "Advanced Editor" in "WHM Home » Service Configuration » PHP Configuration Editor" and add "mail" to the disable_functions option to prevent PHP scripts from sending out email without authenticating. The following document might also be useful:

    Prevent Email Abuse

    Thank you.
     
Loading...

Share This Page