Open relay to relay domain/recipient – is that intentional or a bug?

Discussion in 'General' started by Hannes_at, Jul 4, 2025.

  1. Hannes_at

    Hannes_at New Member

    If you add a relay domain and relay recipient like gmail.com (relay domain) and @gmail.com (relay recipient) than everyone can send to <anyalias>@gmail.com without sasl auth/mynetworks ip.
    I am not sure this is intentional or a bug?

    Ispconfig: 3.3.0p1

    thanks
     
    Hannes_at, Jul 4, 2025
    #1
  2. pyte

    pyte Well-Known Member HowtoForge Supporter

    This is not a bug. It is intentional and only the admin can control these settings.
    You should never add domains/rcpts in there for which your server is not responsible.

    With that said, there is a small improvement that we could do here and that would be in the ordering of smtpd_recipient_restrictions
     
    Last edited: Jul 4, 2025
    pyte, Jul 4, 2025
    #2
    till likes this.
  3. Hannes_at

    Hannes_at New Member

    I used this function to reroute outgoing destinations some times (because server ip is blocked / rate limit / anything else) - my fault - didn't look into the config
    Thanks
     
    Hannes_at, Jul 5, 2025
    #3

Share This Page