Some e-mail safety issue

[VanguardAX1]

1. It seems my SMTP would send infinite verification e-mails if a user constantly click “create user”. That feels dangerous. I would like it to only response to certain e-mail suffix, or something like FAILED_LOGIN_RATE_LIMIT ?
2. Seems my SMTP only works when set to use 25 port, and when set to 465(SSL) nothing happens. It’s that a problem from my SMTP provider?
3. And nothing happens either if I change my NO_REPLY_EMAIL, I suppose that is my SMTP provider’s restriction?

[ThiefMaster]

@VanguardAX1

It seems my SMTP would send infinite verification e-mails if a user constantly click “create user”.

Good idea, we should indeed rate-limit this.

@VanguardAX1

Seems my SMTP only works when set to use 25 port, and when set to 465(SSL) nothing happens. It’s that a problem from my SMTP provider?

AFAIK SMTP+SSL over 465 is deprecated; usually you would use port 587 with STARTTLS. We currently do not expose a setting to use SSL without STARTTLS.

@VanguardAX1

And nothing happens either if I change my NO_REPLY_EMAIL, I suppose that is my SMTP provider’s restriction?

Did you restart uwsgi (and indico-celery)? Otherwise config file changes are not taken into account

[VanguardAX1]

@ThiefMaster

AFAIK SMTP+SSL over 465 is deprecated; usually you would use port 587 with STARTTLS. We currently do not expose a setting to use SSL without STARTTLS.

Seems my email provider is little old-fashioned They only provide 25 and 465 for SMTP.

@ThiefMaster

Did you restart uwsgi (and indico-celery)? Otherwise config file changes are not taken into account

Yes, I restarted every service. I think they limited it to avoid spam mails.

[ThiefMaster]

STARTTLS may be possible on port 25 as well; i’d give that a try