Heyyas,

I was wondering if there was a way to, or any plans to add a way to disallow blank/empty passwords? Due to a lot of traveling I like to use my qmail/vpopmail server as a relay, closed to the world obviously, but open to anyone who can authenticate. A fair amount of people use the system, some of which are not tech savvy.

I've had a few problems caused by people scanning for accounts with blank passwords, finding one, and exploiting the account to relay spam. I understand that this is really an administration issue, but rather than have a cronjob that mails me a list of accounts without a password, it would be nice if there was a way to not accept a blank password. If anyone knows how to do this on a vpopmail level as well, that would rock.

Thanks,

Korf

Reply via email to