Any idea on how to set SMTP_AUTH for localhost so users that use the mail() function can only send mail if they autenticate. or protect/ block some local users to use 127.0.0.1.
You must force SMTP authentication on IP 127.0.0.1.
Put line into tcp.smtp: 127.0.0.1:allow,SMTPAUTH="",AUTHREQUIRED="",SENDERCHECK="STRICT":allow,RBL="",SMTPAUTH="",QMAILQUEUE="/var/qmail/bin/qmail-scanner-queue.pl" Then disable qmail-inject in php.ini.
Regards Nandor Szabo
