• The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.

tracking smtp authentication

S

swebs

Guest
I have smtp authentication required on my server but it seems that someone might have figured out one of the users/password so that they can send spam.

when I look in the secure log I can see a lot of "START : smtp" messages.

How can I see or figure out which user is authenticating these session?

Is there somewhere in Plesk that I can turn on logging to see the TO and FROM in a log file to be able to determine if there is abuse going on?

Thanks in advance.
 
You must log in or register to reply here.

Similar threads

wakabayashi
Question SMTP Firewall - is it possible to block brutforce attacks?
Replies
3
Views
647
Vladimir C.
V
F
Issue SOGo - emails sent from webmail, both manually created and autoresponder/vacation/out-of-office, are rejected. They miss spf, dkim, dmarc, everything
Replies
1
Views
471
Farfalk
F
I
Resolved External SMTP Server Settings
Replies
7
Views
1K
Ither
I
N
Issue Problem: SASL PLAIN authentication failed
Replies
3
Views
781
Vladimir C.
V
X
Question How To Setup Outgoing Only Mail
Replies
5
Views
1K
george-the-guy
G
Back
Top