Disable folder creation for details username

Robert Blayzor rblayzor.bulk at inoc.net
Fri Mar 17 12:23:48 UTC 2023


This may be more of a CPanel issue than Dovecot but CPanel uses Dovecot 
and not sure if this is a knob we have available in Dovecot or we need 
to reach out to Cpanel directly to see if this is some custom code they 
added to their distros.


Anyway, W/R/T emails sent with dtails/ + addresses ie:

foo+bar at mydomain.com


And with LDA/LMTP, in Cpanel by default the detials part, in this case 
"bar" will be created in it's own folder. Automatically.  To us, this 
can be an attack vector/DOS from a malicious actor so we want to turn it 
off.

We understand there is:
lda_mailbox_autocreate

Which we have yes, as we do want to create mailboxes automatically when 
the first message comes in, but not these folders.


I don't know if this folder autocreation on detail part is a Dovecot 
thing, or specific to Cpanel. It appears CPanel has a patch/code to 
option to turn it off, but it's only on a per mailbox basis. We want to 
turn this behavior off globally.


As far as I know, CPanel doesn't release whatever patches they made to 
make this happen, asking here if anyone has experience with this before 
we start chasing them for answers.

-- 
inoc.net!rblayzor
XMPP: rblayzor.AT.inoc.net
PGP:  https://pgp.inoc.net/rblayzor/


More information about the dovecot mailing list