Serious Aliasing Bug

[kwillmon]

I have the latest update to 8.1.1 and found out through search engines that content in my server's main domain can be accessed through the mail sub-domain for ALL other domains on my server. For example:

http://www.MainDomain.Com/ThisFile.Ext
can also be accessed by going to
http://mail.AnyOtherDomain.Com/ThisFile.Ext

or
http://www.MainDomain.Com/SomeDirectory/ThisFile.Ext
can also be accessed by going to
http://mail.AnyOtherDomain.Com/SomeDirectory/ThisFile.Ext

Is anyone else having this problem too?

 

[michaellunsford]

been that way for me since 7.x (my first soirée into plesk).

I'm no expert here, but I believe it's that way so all the POP, SMTP, IMAP, etc, mail traffic gets forwarded to the right place on the server. The same is true of webmail (which you probably wouldn't notice because of the horde interface) and FTP.

The "culprit" is the DNS settings under the server control panel. If your DNS skills are better than mine, then you might be able to figure out how to fix it.

You might also be able to fix it by creating a "mail" subdomain on your default domain. Then adding in an index.php file that checks the $_SERVER['SERVER_NAME'] and does a header redirect to the www address of the same.

 

[crossconnect]

The reason is because the HTTP and SMTP services are accessible over the same IP address. If you set a default web site then any requests that don't match a valid web site (including the IP address itself, or in your case mail.domainname.com) will be answered by the default site.

You could unconfigure the default site so that any invalid requests will be answered by the "Default Plesk Page", or you could manually set up a virtual host to respond to mail.* and fix it that way (but you'd have to do that manually and not through Plesk).

It's not really a bug as such but it's more due to the nature of running virtual hosting.