Re: Does disabling POP3 just mean removing it from the `protocols` list?

2022-03-01 Thread Aki Tuomi
> On 02/03/2022 07:54 Benny Pedersen wrote: > > > On 2022-03-02 02:53, Sean McBride wrote: > > Thanks all for your replies. > > > > I have no need/desire to support anything google-related, so those > > concerns don't apply, but thanks for pointing them out. > > > > So is it just a matter

Re: Does disabling POP3 just mean removing it from the `protocols` list?

2022-03-01 Thread Benny Pedersen
On 2022-03-02 02:53, Sean McBride wrote: Thanks all for your replies. I have no need/desire to support anything google-related, so those concerns don't apply, but thanks for pointing them out. So is it just a matter of removing pop3 from that list in the config file? leave out pop3, pop3s

Re: Does disabling POP3 just mean removing it from the `protocols` list?

2022-03-01 Thread Benny Pedersen
On 2022-03-02 01:14, Harlan Stenn wrote: The reason to support POP3 is that if you forward email to another account and that includes any spam, you are gonna get dinged. If folks want to read their email from gmail, they really need to suck that email over via POP to avoid this problem. and

Re: Does disabling POP3 just mean removing it from the `protocols` list?

2022-03-01 Thread Sean McBride
Thanks all for your replies. I have no need/desire to support anything google-related, so those concerns don't apply, but thanks for pointing them out. So is it just a matter of removing `pop3` from that list in the config file? Thanks, Sean

Re: Apple Mail behaviour: can not create sub-folders

2022-03-01 Thread Joseph Tam
On Tue, 1 Mar 2022, Jan Bramkamp wrote: One of my Apple Mail users recently complained his mail reader couldn't create sub-folders -- he could only create top-level folders. Playing around with this, I discovered that I could create folders ( as opposed to mialboxes) *if* I specified mailbox

Re: Sv: Does disabling POP3 just mean removing it from the protocols list?

2022-03-01 Thread Peter
Honestly, I think that's too much work for almost no gain. Bots can do password guessing just as easily via IMAP or SMTP AUTH so there is little reason to think that trying to block POP3 access to them will do any extra good at all. If you want to put rate limiting in place then that's all

Sv: Does disabling POP3 just mean removing it from the protocols list?

2022-03-01 Thread Sebastian Nielsen
However, you SHOULD IMHO lock the access so it has to be manually opened for each user that wants it. Another way is to do a PTR lookup on IP and [DROP] the packet if its not a google IP. And then have a IP restriction on IMAP and also 587/SMTP Auth. This because there is bots out there that

Re: Does disabling POP3 just mean removing it from the `protocols` list?

2022-03-01 Thread Harlan Stenn
The reason to support POP3 is that if you forward email to another account and that includes any spam, you are gonna get dinged. If folks want to read their email from gmail, they really need to suck that email over via POP to avoid this problem. H On 3/1/2022 3:13 PM, Peter wrote: The only

Re: Does disabling POP3 just mean removing it from the `protocols` list?

2022-03-01 Thread Peter
The only modern reason I can think of to continue to support POP3 is that gmail's email fetch feature only works over POP3, so if you want people to be able to import their email from your server to gmail or google workspace then you should probably continue to support POP3. Peter On

Does disabling POP3 just mean removing it from the `protocols` list?

2022-03-01 Thread Sean McBride
Hi all, Hopefully a simple question. If I want to disable POP3 support (because everyone is using IMAP anyway), it is just a matter of removing `pop3` from the `protocols` setting in dovecot.conf? Are there side effects or other considerations I should be aware of? Thanks, Sean

Re: Custom Authentication Method

2022-03-01 Thread Kees van Vloten
On 01-03-2022 07:15, Aki Tuomi wrote: On 01/03/2022 03:54 Matthew R wrote: Hi guys, we're using Dovecot/Postfix here for our mail system. I'd like to switch the `passdb` authentication on Dovecot from PAM over to a custom implementation. We'd prefer to have some sort of script check the