[RCU] Security issue (possible?) (was: RE: Unknown user in users table, very odd, possible security hole)

Jorge Bastos mysql.jorge at decimal.pt
Sun Feb 11 16:19:42 CET 2018


Alec,

> On 02/09/2018 09:28 PM, Jorge Bastos wrote:
> > Well yes, but now i'm thinking, i have the imap server set to be
> > dynamic it's filled with:
> >
> > mail. + domain.tld
> 
> You have a few options to deal with this
> 
> default_host
> username_domain
> username_domain_forced
> login_username_filter
> trusted_host_patterns
> 

What I want to achieve is, the result of mail . + domain.tld, will result in
two ip's (ex: 1.1.1.1 and 2.2.2.2), I want Roundcube to not connect to any
other than one of this.

Would this be achievable?



More information about the users mailing list