I have allowed only few clients to access mail via web (DWA). The restriction is working fine on lan/internet.
But using the following web site, any user (restricted or not) can access DWA and can login to see his email.
Here I enter user id passwd who is not allowed, but he can access email using DWA using this web site. What should I check or do ?