forwardemail / forwardemail/forwardemail.net

[feat] Deny NEW outlook users, Microsoft Cloud

Open
#572 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
JavaScript
Stars
1.7k
Forks
203
PR merge metrics
No merged PRs in 30d

Description

You know that New Outlook is not an Email Client but a service on Microsoft Cloud that uses the imap credentials in Outlook to check the mailbox from Microsoft servers.

I would like to block users of my domain configuring 'New Outlook' (usually by mistake) on their PC because i don't want private data going to the Microsoft's Cloud.

Would it be possible to block IPs/hostnames of Microsoft servers to login/authenticate (on imap, pop, smtp)?
An imap/pop login log (also a synthetic log of last unique IPs, per user) would be useful and sufficient.

Contributor guide

Open the contributing guide

Research direction

No files, tests, or entry points are identified in the issue. Start by locating the IMAP, POP, and SMTP authentication paths and the existing login logging, then determine whether blocking Microsoft endpoints or recording unique client IPs fits the current architecture. Done should include a clear, tested behavior for the requested protection or logging.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript
Domain
authentication, backend, observability
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.