mirror of
https://github.com/mail-in-a-box/mailinabox.git
synced 2026-03-13 17:17:23 +01:00
prevent accidental domain control validation hijacking by limiting use of admin@ etc. addresses in users/aliases
This commit is contained in:
@@ -7,6 +7,7 @@ In Development
|
||||
Mail:
|
||||
|
||||
* POP3S is now enabled (port 995).
|
||||
* In order to guard against misconfiguration that can lead to domain control validation hijacking, email addresses that begin with admin, administrator, postmaster, hostmaster, and webmaster can no longer be used for (new) mail user accounts, and aliases for these addresses may direct mail only to the box's administrator(s).
|
||||
|
||||
System:
|
||||
|
||||
|
||||
Reference in New Issue
Block a user