Post #3274050

I've noticed a major security flaw in poste.io ... On one of my deactivated accounts, where the password was bruteforced, the SMTP does not block anything (auth=pass (login) + ESMTPSA). As a result, there was a massive spam wave on one of my personal mail servers (meow is not affected) ....