Recent content by The Merchant

Hello. So i've read alot of threads about people asking to change port 8006, which i think is a reasonable question. However, it seems that PMG and PVE is built to use a static predefined port which is 8006. I know that a reverse proxy can be used to access the GUI of both PMG and PVE on any...

The SPF is not missing nor misconfigured. I think i found the issue though. I used the internal port for relaying instead of the external.

I did. It's 100% valid. The problem is just that SpamAssassin doesn't weight SPF rules very high. I tried increasing the SPF_FAIL and SPF_NONE rules but it caused e-mails from Gmail to be blocked, which is very weird - apparently Gmail doesn't use SPF i guess, since a Gmail mail triggers the...

I experience this exact issue. I can send e-mails from mydomain.com to mydomain.com using an SMTP Test Tool in Windows. And my domain do have a hard faill (-all) in the SPF.

Even with domains that has a final -all in their SPF, i can spoof using SMTP Test Tool for Windows. PMG completely ignores the SPF and delivers all e-mails.

I've setup SPF (it was before as well) but PMG completely ignores the SPF. I've been through multiple threats where other users cannot make the SPF check work as expected.

I'm testing out PMG as a mailproxy for my Exchange server. I noticed that it's possible for me to send an email from ****.com to ****.com, creating a phising mail, from a simple SMTP testing tool (****.com represents my own domain). PMG runs on a container (in Proxmox) next to the Exchange...

Welcome stranger

I kept getting the following error: cannot create 'rpool/encrypted_data': no such pool 'rpool' If this happens to you, use zpool create rpool /dev/{disk_name} to create the pool first, and then run the commands as provided by @MaLe

But only from and to domains listed in my trusted domains.

My concern is that if you know my email right now you can send a mail from 1@mymail to 2@mymail through my PMG using any SMTP tool

Hi Daniel. Thanks for the reply. I understand that everybody can send to my mailbox but not why everybody can send from my relay. This can cause phishing mails if someone knows a trusted mail from my server by sending from my mail to another one of my mails. Hope I make sense.

Isn't that a security issue? So basically if I know your listed domains and email accounts, I can send internal spam and phishing mails inside your organization? The real question is, is there a way to combat this? My first thought is by rules if it's possible to check the sender IP, but I...

Hello. I'm using PMG as a mail proxy for my Exchange mailserver. Yesterday I noticed that it's possible to send mails anonymously from the domains listed in my relay domains, to any other domain listed in my relay domains. I tested from an unrelated external network, and i was able to send...

Sorry for reviving an old thread, but are you telling me that PMG is suppose to allow anonymous senders send mails from your PMG as long as it is to a domain listed under "Relay domains"?