Hello everyone!
I have a straightforward question that I haven’t been able to find an answer to — either through documentation or expected behavior from the context.
What is the purpose of the “Allowed Protocols” setting for a given mailbox?
Is it supposed to allow or deny access to mail via the selected protocols?
I can’t seem to get it working as expected. As you can see in the attached screenshot, only SSO is allowed — which I assume refers to logging into the Mailcow UI itself. That, in turn (if configured), forwards you to your mailbox via SOGo, and you’re done.
The problem is that any mail client can still connect via IMAP/SMTP using user credentials without restriction. In other words, it does not deny access as it’s supposed to.
Is there something else that needs to be configured to make this work properly?
On the other hand, 2FA works as expected — when it’s enabled, users can’t access the server unless they’ve set up an app password.
Am I missing something here?
