Security - Mail - Prefix
Hello.
In one of the last version of WHM/cPanel it was added feature which allow to send senders emails with special command.
Example:
To: <your-email+test@your-domain>
This allow a lot of abuse.
#1 This feature should be turned off as default
#2 Email should allow only accept emails when folder already exists in mail folder
Example:
If abuse will start sending 10.000 emails to 1 email address with 10.000 different special command will create 10.000 folders with 1 email. This can be very frustrate from receiver who has that email address.
#3 This feature should allow only to add email in Inbox folder and not in Sent.
Example:
your-email+Sent@your-domain
This command allow abuse to put "fake" email in Sent folder which cannot be acceptable.
Note: Feature is good but new few improvement to increase security in Cyber crime.
Thank you.
Replies have been locked on this page!