On 6.4.2013, at 18.18, Arnaud Abélard <arnaud.abel...@univ-nantes.fr> wrote:
> We have been using lda_mailbox_autocreate to avoid to intialize empty 
> mailboxes upon account creations. This does the job allright except that 
> dovecot-lda is also allowed to autocreate sub folders which is a problem when 
> using addresses extensions (adress+fol...@domain.tld). It's easy for a 
> malicious user to flood a mailbox with tons of subfolders.
> 
> Is there a way to tell dovecot-lda it can only create the initial mailbox and 
> maybe some special folders but nothing else?

INBOX is autocreated regardless of lda_mailbox_autocreate setting. So just set 
it to "no".

Reply via email to