Author |
|
jeff Newbie
Joined: 11 March 2009 Location: Canada
Online Status: Offline Posts: 10
|
Posted: 13 May 2010 at 10:03am | IP Logged
|
|
|
I was wondering if there is a way to limit the amount of recipients a user can e-mail to on a per e-mail basis? i.e. you can only e-mail 100 people at one time. Also, is there a way to limit the amount of e-mail per day? So you can e-mail a total of 100 people per day, whether you e-mail them all at once or in 100 separate e-mails it doesn't matter.
I looked in the Admin Panel but don't see any options. Was just curious if there was located in the code somewhere.
Thanks,
Jeff
|
Back to Top |
|
|
Igor AfterLogic Support
Joined: 24 June 2008 Location: United States
Online Status: Offline Posts: 6104
|
Posted: 14 May 2010 at 2:08am | IP Logged
|
|
|
There's no way to apply such limits in WebMail Pro. We believe the limitations of such kind should be configured on mailserver end instead.
--
Regards,
Igor, AfterLogic Support
|
Back to Top |
|
|
nickux Newbie
Joined: 08 July 2010
Online Status: Offline Posts: 16
|
Posted: 08 July 2010 at 5:11am | IP Logged
|
|
|
This may be correct in small installations but from my experience, larger installations require checks for abnormal use in all steps.
And abnormal use may be a nice user who makes a mistake or a malicious user who tries to bomb the system.
Perhaps such a check should also be done before relaying to the SMTP server. An httpd with a PHP that accepts large POST amounts of data may choke if someone maliciously tries to send to thousands of users without some sort of prevention.
And, of course, I'm not talking about the everyday user but someone who has scripted it in order to fool around with the system.
Perhaps PRO version could have some sort of checks using memcached (ideally) or even MySQL to keep an eye on abusers.
|
Back to Top |
|
|
nickux Newbie
Joined: 08 July 2010
Online Status: Offline Posts: 16
|
Posted: 08 July 2010 at 5:13am | IP Logged
|
|
|
Similarly, I believe there should be some form of control for failed login attempts, although I've implemented my own solution during external authentication.
But I think that brute force attacks could be prevented in such cases, especially when the POP3/IMAP server is not accessible but webmail login is (for example in an intranet/extranet situation).
|
Back to Top |
|
|