SecurityInsight settings · Settings > Mail & notifications
Send mail without sign-in
| Key | Mail_SendAnonymous |
|---|---|
| Where | Settings > Mail & notifications > Mail server |
| Type | On / off |
| Default | Off: the mail server sign-in (user, password, sender) is required |
| Edition | Community |
| Confirmation | SecurityInsight asks you to confirm before it is switched on. |
What it does
Sends mail through a relay that accepts mail without a user name and password.
When enabled
no SMTP credentials are needed or checked. Off with mail switched on: the run stops at start if the sender, user or password is missing. A relay that requires sign-in rejects anonymous mail.
When disabled
the mail server sign-in (user, password, sender) is required
Risk and how to reverse it
Mail is sent without signing in to the mail server: only safe through an internal relay that accepts mail from this host alone. With an open relay, report mails can be spoofed or intercepted. Reversible at once.
Requires
Read by: risk-analysis.
Recommended
Off (sign in to the mail server, or use the shared mailbox).
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack