On 29/12/2021 14:15, Mark Foster via mailop wrote:
I use Roundcube myself and as a _user_ of the software, it hadn't occurred to me that, much like Gmail, people who send emails using this webmail tool have _full anonymity_ (except, of course, from the service operator).
Should have included this in previous,. went of on such a rant I lost where I was LOL...
The problem I see is the OP wants the rules in dovecot, to also apply to a web server. So what if RC gave clear text IP's, you add some config and block them at imap, do you think the badguys care? they will still be slamming your web server, so you have just moved the problem sideways, not cured it, as I said rcguard to force captcha after a couple failures, in combination with fail2ban - problem solved, bad guys dont get to webmail let alone hitting imap which still has to happen for dovecot to ignore them.
-- Regards, Noel ButlerThis Email, including attachments, may contain legally privileged information, therefore at all times remains confidential and subject to copyright protected under international law. You may not disseminate this message without the authors express written authority to do so. If you are not the intended recipient, please notify the sender then delete all copies of this message including attachments immediately. Confidentiality, copyright, and legal privilege are not waived or lost by reason of the mistaken delivery of this message.
_______________________________________________ mailop mailing list [email protected] https://list.mailop.org/listinfo/mailop
