creating user-mailboxes without cyradm

[Hans Wilmer]

On Mon, Jan 27, 2003 at 12:28:56PM -0500, Ken Murchison wrote:

> > is there a way to create INBOXes for users by IMAP-commands
> 
> Sure, read RFC 2060.  You'd do "tag CREATE user/username"

How is this dealt with in respect to security and reliability?

Just write a script that logs in and automatically creates mailboxes
from randomly generated (user-) names until the storage is
full. That's sort of making DOS attacks utterly easy.


GH