cPanel Forums

One of my users forwarded me a spam message they received. It was sent to them with the From address of their mailbox.

Checking Exim logs shows the message was submitted from a foreign IP address and accepted without error.

I also did some testing with several user accounts and a two cPanel servers. Both accepted and delivered a message from an unknown IP as long as the From address was the same as the destination address which is a local mailbox.

I was also able to use two different...

Spam from local user delivered without authentication