Security problem with exim

[ciberplay]

Hello we have a problem, our whm server use exim, it allow send anonymous mail from whatever email address and we dont know how to avoid it, if you configure an email client with no authentication server for outgoing mails, it allow send mails only writing and address of an existing domains in our server.

we have two servers and in only one happen....

they have the same tweaksetting and the same exim configuration...

Thankyou for all, and sorry for my english....

 

[ThinIce]

It might be worth ensuring you're not authenticated against the server with pop before smtp before testing this (i.e. don't log into an email account to check mail while testing on the same internet connection).

You can have a look in /etc/relayhosts for your IP...

 

[cPanelMichael]

Hello

Authentication should be required in all cases. Even in cases where Antirelayd is enabled, a user must still login via POP/IMAP before sending. There is documentation on this at:

Require SMTP Authentication

Please open a support ticket and let us know the ticket number if you would like us to try reproducing the issue you have described:

Submit A Ticket

Thank you.