Mailcow-dockerized: Feature suggestion: Rate limiting

Created on 8 Jul 2017 · 9Comments · Source: mailcow/mailcow-dockerized

Hey guys I'm pretty much happy with Mail Cow, so I'd like to ask you about something I find useful to prevent users from abusing.

How about:
"Mail Sending Limit per domain" something like hourly rate or daily rate.
"Incoming Mails per hours per domain" also not being override by custom white listing already existing in Mail Cow.

Examples:
DOMAIN.TLD: Max Mail Sending per hours cap = 300
DOMAIN.TLD: Max Incoming Mails per hours cap = 1,000

What you guys think? and if its possible to implement such feature? TY.

Source

alyzrazor

Most helpful comment

Need to implement this for users. But it works as expected.

andryyy on 12 Jul 2017

🎉6

All 9 comments

Postfix supports rate limiting, so your suggestion could be added to Mailcow reasonably easy. I don't see a point in limiting incoming emails per hour, but it does make sense to limit outgoing emails per hour to prevent abuse of hijacked accounts.

mkuron on 8 Jul 2017

👍3

We have a nice ratelimit feature in Rspamd, too. It can be customized with LUA. Worth a try?

This is a question often asked by commercial hosters to prevent abuse. I thought about doing a good integration, but that's pretty much (unpaid) work for a feature only hosters profit from. :-) I hope I don't sound greedy or arrogant by saying this... But remember this is all free work from _every_ contributor here.

andryyy on 8 Jul 2017

😄3

haha I get your point @andryyy however if you ever feel bored enough that feature is gonna be awesome :)

alyzrazor on 8 Jul 2017

👍1

Ratelimiting outgoing e-mails makes sense and is a feature which I wouldn't mind having. I do not use mailcow for commercial purposes, but I do provide e-mail hosting for family, friends and various projects and to keep it nice and cool, it makes sense to ratelimit outoing e-mails (per hour).

k0nsl on 9 Jul 2017

I wrote a ratelimit for outgoing mails in LUA. Will test it over the next days.

andryyy on 12 Jul 2017

Need to implement this for users. But it works as expected.

andryyy on 12 Jul 2017

🎉6

Oh my gooodness @andryyy you did it 🥇 I'm hoping to see it in action soon :)

alyzrazor on 13 Jul 2017

Has been implemented in the mean time.

mkuron on 9 Sep 2017

Hello, just a small question about this rate limit. It will just reject to send all the emails posted to SMTP by the client, or it will delay them and send them once the time will be over. I want to enable it to send emails in waves, as the SMTP server is used by our e-shop and we want to eliminate SPAM warnings when sending AGREED newsletters.

Thanks
Simon