Spam Blocking by filtering on username / id

[Sami Ketola]

> On 23 Sep 2019, at 8.29, Plutocrat via dovecot <dovecot at dovecot.org> wrote:
> 
> This is probably quite an easy question, but I haven't been able to find the answer. I'm running a server where all the email addresses are in the format "user at domain.com". I've noticed that a large number of fake login attempts use the format "user" eg. reception, service, root, admin. 
> 
> Is it possible to prevent any such logins to these email users without an @domain.com? Or maybe ignore them. Or drop them from the logging. 
> 
> P.

you can add username_filter = *@domain.com

or deny-passdb before actual passdb with username_filter = !*@domain.com

https://doc.dovecot.org/configuration_manual/authentication/password_databases_passdb/ <https://doc.dovecot.org/configuration_manual/authentication/password_databases_passdb/>

feature has existed since dovecot 2.2.30

Sami

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://dovecot.org/pipermail/dovecot/attachments/20190924/40797272/attachment.html>