1
0
mirror of https://github.com/mail-in-a-box/mailinabox.git synced 2026-03-13 17:17:23 +01:00

prevent accidental domain control validation hijacking by limiting use of admin@ etc. addresses in users/aliases

This commit is contained in:
Joshua Tauberer
2015-04-09 13:34:46 +00:00
parent cb656f9ef4
commit 072aeca1be
2 changed files with 27 additions and 4 deletions

View File

@@ -7,6 +7,7 @@ In Development
Mail:
* POP3S is now enabled (port 995).
* In order to guard against misconfiguration that can lead to domain control validation hijacking, email addresses that begin with admin, administrator, postmaster, hostmaster, and webmaster can no longer be used for (new) mail user accounts, and aliases for these addresses may direct mail only to the box's administrator(s).
System: