Hello Joaquim, This is the normal behavior. If you did not enabled password recovery in configuration file, it may return a 403 code.
Sebastien Le Mardi, Juillet 16, 2024 15:50 CEST, Joaquim António (joton...@gmail.com) <users@sogo.nu> a écrit: Hello SOGo team, I'm seeing several POST /SOGo/so/passwordRecoveryEnabled requests, coming from multiple IPs from the internal network. These average about 5 to 10 requests per minute. There is no indication of malicious activity, as only this endpoint is contacted and it comes from several internal IPs, which makes me suspect this is caused by the way this software functions. I looked up this issue online, including other threads on the mailing list but found nothing so far, anyone has a clue on what might be happening? Thank you. Best regards, Joaquim Antonio
