"Francis P. Ling" wrote:
>
> Found it, under ChangeLog of vpopmail.
>
>
> <snip>
> ...
> 3.4.10
> ...
> ...
> ...
> - if a user is over quota, messages of 1K or less are still delivered.
> This allows system admin programs to send an over quota message to a user.
> ...
> </snip>
>
> Well, is this a security problem?
We discussed hardquota's on the mailing list and alot of
admin's said they wanted the ability to get a message
through to the user even if they are over quota. Like.
"You are over quota, please delete some mail."
Security risk, only if someone sends 10,000
emails. I think you would notice the reception
of so many emails before the user ate up all
of your disk. The average small email is about
2K.
Ken Jones
