[cyrus 3.0] 20 delayed mailbox deleted limit?

[Andre Felipe Machado]

Bron Gondwana via Info-cyrus <info-cyrus at lists.andrew.cmu.edu> wrote ..
> On Fri, Jun 10, 2016, at 09:41, Jason L Tibbitts III wrote:
> > >>>>> "BG" == Bron Gondwana <brong at fastmail.fm> writes:
> > 
> > BG> Just to be really clear what this is.  It's per mailbox name - if
> > BG> you create and delete the SAME mailbox more 20 times, it only keeps
> > BG> the most recent 20 of that mailbox.
> > 
> > Hmm.  That's much less problematic, but it still allows someone to force
> > something to be deleted if they really want it to be deleted.  That's
> > not really an issue for me because my users wouldn't figure it out, but
> > I can imagine that someone using delayed expiry to easily implement some
> > sort of legal requirement might be unhappy.  But that's somewhat of a
> > stretch.
> 
> Yep.
> 
> Anyway, magic numbers are bad, so I will make this configurable.  It's easy to
> do, and if people with different systems need it changed, then that's fine.
> 
> With uniqueid based storage it will all be nicer anyway :)
> 
> Bron.
> 
> 
> -- 
>   Bron Gondwana
>   brong at fastmail.fm
> ----

Cheers, Bron.
configurable on imapd.conf .
But I guess it is still not enogh to protect against the DoS / waste space you cited.
Your ideas of 2 quotas and having means to also control individual total quota is better suited for these tasks.
Are there better ideas?
Regards.
Andre Felipe