Re: Spam Folder

2021-11-25 Thread Tyler Montney
I accidentally replied directly to OP. > I noticed something similar, too. Under Account Settings > Junk Settings, I had to check the box for Destination & Retention. Then, my Junk folder appeared. On Thu, Nov 25, 2021 at 4:28 PM bobby wrote: > I am using IMAP. > I've updated my config to use "

Help needed for OAuth and WSO2 Identity Server

2021-11-16 Thread Tyler Montney
As outlined here: https://doc.dovecot.org/configuration_manual/authentication/oauth2/ Can Postman https://identity.foo.mylocal:9443/oauth2/token OK. Using this command to generate the base64 token: echo -en 'n,a=t...@foo.com,\001host=localhost\001port=143\001auth=Bearer S3cure!Password\001\001' |

Re: Strategies for protecting IMAP (e.g. MFA)

2021-11-15 Thread Tyler Montney
> Probably because it can be complex to set up and maintain Such is mail and many other things, which falls on the admins. I see no harm in exploring what's what before deciding. > and more would be gained by educating users Yes, users are the weakest link. Users are also the biggest challenge.

Re: Strategies for protecting IMAP (e.g. MFA)

2021-11-13 Thread Tyler Montney
ementation. "if the users are sufficiently discipline" As a Sysadmin, I can tell you they genuinely are not and they likely never will be. Hope for the best, plan for the worst. I also want to clarify that I'm not rejecting any of these suggestions, they're all good. On Sat, Nov 13,

Strategies for protecting IMAP (e.g. MFA)

2021-11-13 Thread Tyler Montney
With the world of ransomware as it is today (aka attacks seem more vicious and commonplace), anything I expose to WAN must have additional protection. I've seen a few posts to this list on it. The only thing that helped was that Dovecot supports OAuth. Through OAuth I figure I could implement MFA.