ConfigServer Community Forum

Is it possible to disable/set SMTP_ALLOWLOCAL to 1 but still allow webmail (Horde and Roundcube) usage? I have a particular account which has its wordpress constantly hacked even with auto-updates which I would like to just disable use of smtp_allowlocal altogether. It does have valid email accounts which are heavily used through their email software which eliminates many of the other options.

Thank you!

probably not. Have you considered turning off the mail function for php for their account? That could help things. Also, if they are continually getting hacked, its probably their third party modules or themes that they are using. Are you using well maintained mod_sec rules as well? Lastly, are you starting everything from scratch after they get hacked? Probably not being properly cleaned, so not really being rehacked.