On Thursday, July  2 at 05:28 PM, quoth Jose Luis Marin Perez:
When calculating the quota through maildirsize did not consider the emails with flag T.

What's the point of having a quota if users can circumvent it by simply labeling their messages as "deleted"?

In all truth, if it weren't for the "expunge" command, the \Deleted label would be no different from any other label. And from that perspective, what you're asking for is essentially equivalent to a "\DoesntCount" tag, so that users can circumvent the quota by giving their messages a tag that prevents them from counting towards their quota limit. The messages *aren't* deleted; they can still be read, copied, forwarded.

What is to prevent a user from storing several gigabytes worth of "deleted" messages on your server? From that perspective, this is a security problem: any user can attack your server by creating a denial-of-service condition. They can simply store a huge number of "deleted" messages, occupying so much disk space that no other users can receive mail. Normally, a quota mechanism is supposed to protect you from this type of attack, but you're explicitly asking for a way for users to easily avoid the quota restrictions.

Dovecot is working perfectly, the problem is that as Courier had this feature,

That's not a feature, that's a security bug.

users will not purge mails

So what's the point of having a quota?

~Kyle
--
Those who profess to favor freedom, and yet depreciate agitation, are men who want rain without thunder and lightning.
                                                 -- Frederick Douglass

Attachment: pgpfmI4n7SN52.pgp
Description: PGP signature

Reply via email to