I just lost a lot of trust in the turnkey project. After setting up a fresh VM installation (form iso) of turnkey wordpress, I daily receive spam mails offering me services for my domain. Paranoid as I am, I set up a new, unique e-mail alias to be used as wordpress admin, so I know for sure that this is the root cause of the spam.
At first, I appreciated the fact that e-mailing works just out of the box; but not for that price. Can anyone point me to where I can change the used smtp to one I trust?