Mailcow-dockerized: Feature Request: Unlimited quota

[PhoenixPeca]

Hi Andre,
It would be awesome if administrators can create a mailbox with unlimited quota. 😄

[andryyy]

I will look into it. :-)

[apintocr]

Setting the quota as -1 doesn't do this?

[sriccio]

Now way to set domain and/or mailbox unlimited quota ? Will it be possible in the future ?
Thanks :)

[posarelli]

Please there is something to to with this feature? I came from ired mail. In iRedMail you can set a quota for domain and mailboxes with unlimited quota...
It seems odd to to have this limitation...

Thanks in advance

[develth]

+1

Would be great to set Mailbox Quota to "limited to Domain Quota".
So quota still exists ( no full disk risk ) and users could use their full available quota without changing mailboxes to fit the needs.

Thanks!

[McLive]

+1

[GGLinnk]

+1

[MarcelFranken]

+1

[apintocr]

@andryyy can you point out a draft about what neeeds to be done to implement this feature?
I believe this is not as easy as it looks and if you outlined a draft we could start making pull requests!

I'd love to have this feature and I can contribute with anything I can, however I'm mostly a PHP/javascript developer, so my skillset is a bit limited on this (but I'm a fast learner anyway).

[andryyy]

[apintocr]

@andryyy I don't understand sorry :(

I tried that but it does not work.
How our managed to put 0 there?

[andryyy]

It doesn't yet, I only implemented it, but have not pushed it to master.

[apintocr]

It doesn't yet, I only implemented it, but have not pushed it to master.

Wooo!! Nice! and thank you!
Just updated to check and test.

Making a quick test I found that if we define a domain quota to, for example 200MB and one of the accounts with Unlimited Quota, goes over that limit, that account continues to receive email.

Just reporting it, I'm still very grateful for this feature ;) Thank you @andryyy

[andryyy]

Thanks. :) It is unlimited, not related to any other limit like a domain quota. A domain limit is just to declare how much space you can assign within this specific domain.
If you decide to assign 0, you do not want a limit. What you want is something totally different. How would you handle 5 mailboxes within a domain with a 20 GB limit? You cannot make them share a single quota.

So that’s expected and won’t be fixed.

[apintocr]

@andryyy I understand your point.
But this way theres a security flaw that allows any user with domain access to bypass any limits by creating a mailbox with unlimited quota.

[posarelli]

I don't see as a security flaw.
Its about boundaries and limits not security.

If a domain administrator has the power to give all domain space to a
single mail, I guess is a decision he can take.

António Pinto ha scritto:

@andryyy https://github.com/andryyy I understand your point.
But this way theres a security flaw that allows any user with domain
access to bypass any limits by creating a mailbox with unlimited quota.

—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub
https://github.com/mailcow/mailcow-dockerized/issues/71#issuecomment-478259776,
or mute the thread
https://github.com/notifications/unsubscribe-auth/AB146rHKmeBnOCNhqiC4_BZPgSpgf03tks5vb4ucgaJpZM4MMROi.

--

---

Andrea Posarelli
Sysadmin professional consultant

Website: http://www.posarelli.net
Mailbox: [email protected]
Skype: posarelli
Linkedin professional Profile:
http://www.linkedin.com/in/posarelli/it

---

[andryyy]

I could add an ACL. But I don’t plan to change the behavior. Unlimited is unlimited. :-)

[apintocr]

I don't see as a security flaw. Its about boundaries and limits not security. If a domain administrator has the power to give all domain space to a single mail, I guess is a decision he can take.

The thing is, the domain administrator may get assigned 20GB of space.
But if he creates a mailbox with unlimited quota, he will be able to use more than 20GB.

@andryyy

I could add an ACL. But I don’t plan to change the behavior. Unlimited is unlimited. :-)

Yes, an ACL would be perfect.

[posarelli]

The unlimited quota on user account can exceed domain quota?
If we can fix this I think will be OK.

António Pinto ha scritto:

I don't see as a security flaw. Its about boundaries and limits not
security. If a domain administrator has the power to give all domain
space to a single mail, I guess is a decision he can take.

The thing is, the domain administrator may get assigned 20GB of space.
But if he creates a mailbox with unlimited quota, he will be able to use
more than 20GB.

@andryyy https://github.com/andryyy

I could add an ACL. But I don’t plan to change the behavior.
Unlimited is unlimited. :-)
Yes, an ACL would be perfect.

—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub
https://github.com/mailcow/mailcow-dockerized/issues/71#issuecomment-478268829,
or mute the thread
https://github.com/notifications/unsubscribe-auth/AB146tMH-hwh91MiA_-T_OnqBAVd_tgBks5vb597gaJpZM4MMROi.

--

---

Andrea Posarelli
Sysadmin professional consultant

Website: http://www.posarelli.net
Mailbox: [email protected]
Skype: posarelli
Linkedin professional Profile:
http://www.linkedin.com/in/posarelli/it

---

[andryyy]

The thing is, the domain administrator may get assigned 20GB of space.

How? You have 10 mailboxes with unlimited quota and each get the 20 GB domain quota assigned? So you have 200 GB of domain quota?

That's after all a feature for resellers. Almost no reseller ever donated, so I don't really care. Sad but true. 😄 Thanks to all those who did, no matter who you are or what you use it for, just thank you!

I will add an ACL whenever I find time.

[apintocr]

The thing is, the domain administrator may get assigned 20GB of space.

How? You have 10 mailboxes with unlimited quota and each get the 20 GB domain quota assigned? So you have 200 GB of domain quota?

That's after all a feature for resellers. Almost no reseller ever donated, so I don't really care. Sad but true. 😄 Thanks to all those who did, no matter who you are or what you use it for, just thank you!

I will add an ACL whenever I find time.

I understand your point of view.

After all, this is a opensource project, commercial use scenarios should be taken care of as paid features or at least sponsored ones.

I'll see if somehow I can help.

[PhoenixPeca]

So glad to have this feature!

Thank you @andryyy