Suspended account can still access Roundcube and Squirrelmail?

[pucky]

Howcome? I suspended a customer this AM because someone uploaded the FM29Shell script to their site and used it for spamming (another story).

But i found someone logging into http://domains.com/roundcube/ without a problem. Howcome? Surely this should not be allowed for a suspended account.

I tested it and i was able to go to the http://domain.com/roundube and it loaded up just fine.

I realize this is just a path to roundcube in apache conf but there has to be a way to completely disable loading a webmail url during a suspension.

 

[chatwizrd]

My guess is it only suspended the user account and not the virtual email accounts. Not sure what exactly the suspend does but I think it should make sure nothing works at all. Since they are different passwd files maybe it didnt disable the virtual email accounts. It would need to be verified by directadmin on what exactly they are disabling.

 

[zEitEr]

Hello,

Normally all virtual email accounts are listed with their passwords in /etc/virtual/domain.com/passwd file. The file is used whenever a user logins via SMTP/POP3/IMAP to deal with emails.

As soon as an account (not a domain on user level) on admin/reseller level gets suspended, every domain on the account gets also suspended. Regarding email accounts it's done the following way: the directory /etc/virtual/domain.com/ changes to /etc/virtual/domain.com_off/, that makes completely impossible to connect to SMTP/POP3/IMAP server with those credentials in /etc/virtual/domain.com/passwd as the file during suspending does not exist.

Thus, make sure you've got the account suspended, but not that single domain.

Check the directory /etc/virtual/domain.com and /etc/virtual/domain.com_off, which one you have there?

And of course, whenever a domain/account is suspended or not it be always possible to access http://domain.com/roundcube while the domain points to your server. Suspending does not effect DNS records at all by default.