Why is the email on 'SECURITY information for panel....' sent from username of admin to root when Global SMTP Relay is configured?

Hello,

This is my first post in the forum.

I am running on Ubuntu 22.04 (LTS) x64.

Let’s say my domain is mydomain.com. I have just installed HestiaCP with the default admin user:

  • installed on panel.mydomain.com
  • username = usernameofadmin
  • email address = [email protected]

My domain email is with Microsoft 365, and in HestiaCP I’ve configured Global SMTP Relay using SendGrid so that it sends email from [email protected]. I have also executed bash /usr/local/hestia/install/upgrade/manual/configure-server-smtp.sh.

/usr/local/hestia/conf/hestia.conf have these entries:
SERVER_SMTP_ADDR=‘[email protected]
SERVER_SMTP_HOST=‘smtp.sendgrid.net
SERVER_SMTP_PASSWD=‘XX.xxxxxxxxxxxxxxxxxxxxxxxxxxxxx’
SERVER_SMTP_PORT=‘587’
SERVER_SMTP_SECURITY=‘TLS’
SERVER_SMTP_USER=‘apikey’
SMTP_RELAY=‘true’
SMTP_RELAY_HOST=‘smtp.sendgrid.net
SMTP_RELAY_PORT=‘587’
SMTP_RELAY_USER=‘apikey’

By triggering a manual backup in Hestia portal for admin user, HestiaCP sends the backup success notification from [email protected] to [email protected]. Notification email is received in mailbox of [email protected].

After I SSH into my Ubuntu server on the sudo user, let’s say I run a command sudo tail -f /var/log/exim4/mainlog, it prompt for password entry. On 2 password incorrect tries, I cancelled the login. It seems to generate an email with the following log in /var/log/exim4/mainlog:

2024-09-09 11:27:27 xxxxxx-xxxxxx-xx <= [email protected] U=usernameofadmin P=local S=641
2024-09-09 11:27:28 xxxxxx-xxxxxx-xx => [email protected] R=send_via_smtp_relay T=smtp_relay_smtp H=smtp.sendgrid.net [xxx.xxx.xxx.xxx] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256 CV=yes A=smtp_relay_login C=“250 Ok: queued as xxxxxxxxxxxxxxxxxx”

SendGrid relayed the email to Microsoft, and of course Microsoft rejects it since there is no such mailbox [email protected]. This is what SendGrid captured:

May I know why in this case the email is not sent From [email protected] to [email protected] since Global SMTP Relay is set?

Thank you.