postal
postal copied to clipboard
feat: yield AUTH failure warn when unauthorized client operation
According to discussion #2791, display an AUTH failure warning when clients try to send mail or perform other operations before authenticating(usually bad clients/bots attack).
Without the warning, the client's IP needs to be contextualised in the log based on the record ID, while fail2ban can be easily used to prevent this kind of attack by detecting the error log added.