• Debian 11 is approaching its end-of-life (vendor EOL date - August 31, 2026). Plesk Obsidian 18.0.80 will be the last release to support it.
    If you are running Plesk Obsidian on Debian 11, we recommend you upgrade those servers to Debian 12 using our dist-upgrade tool.
  • We plan to deprecate and remove the support for XML RPC protocol versions earlier than 1.6.9.1 in Plesk Obsidian 18.0.82. We strongly recommend that you update all existing integrations using earlier versions of the XML RPC protocol to comply with the version 1.6.9.1 specification.

Prevent sending as different mail account

CalibeR.50

New Pleskian
Hi,

how can I prevent users from sending mail as a different account than they are authenticated as?

Example:
Webspace example.com has a mail account [email protected]
Webspace whatever.com has a mail account [email protected]
Both webspaces are sharing the same IP

It's now possible for either accounts to spoof the other account, for example the user of [email protected] can send emails with "[email protected]" in the from header. It's also possible to send as non existent accounts and even domains.


Is there any option to prevent this?
 
Back
Top