These applications work together well but there is a loophole which can be closed as follows.<\/p>\n
First, we force require-auth in spamdyke.conf, add this line to the top:<\/p>\n
filter-level=require-auth<\/pre>\nOn its own this will not work properly and will block incoming mail from external providers. So, we need to dynamically create a whitelist that spamdyke can work with. We use a PHP script as follows:<\/p>\n
<download php script><\/p>\n
Run this script as a cronjob every 15 minutes to gather updated email address from Plesk.<\/p>\n
Now you will see that the spam email that has been finding its way through the loopholes can now no longer send emails. You can check the blocked emails using this rule as follows:<\/p>\n
cat \/var\/log\/maillog | grep \"DENIED_AUTH_REQUIRED\"<\/pre>\nSee how emails from ebay, paypal etc are no longer being sent from compromised accounts?<\/p>\n","protected":false},"excerpt":{"rendered":"