dovecot - Feb 2016 - Block public namespace mail when quota exceeded

Dear All,

is it possible to temporarily reject mails, when quota of public namespace
subfolder is exceeded? I'd check folder size with a cronjob.

Dovecot is using a system user, so I guess blocking post and insert in ACL
isn't a solution?

I don't want to set the folder to read-only, that users can still delete
mails.

Thank you in advance.

- Chris

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Thu, 25 Feb 2016, Chris wrote:
> is it possible to temporarily reject mails, when quota of public namespace
> subfolder is exceeded? I'd check folder size with a cronjob.
How does the MTA know that the message is filed into a public namespace?
> Dovecot is using a system user, so I guess blocking post and insert in ACL
> isn't a solution?
you mean users drop messages via Sieve script there? Yes, removing post 
and insert is a solution, but the message is still excepted by the MTA and 
generates a DSN if not resolved in a time.
> I don't want to set the folder to read-only, that users can still
delete
> mails.
>
> Thank you in advance.
>
> - Chris
>
- -- 
Steffen Kaiser
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEVAwUBVs6sU3z1H7kL/d9rAQICKgf/R1xL4zDlg8ICIFQBoxrDDnW3JWAqgkb1
k597wUona8FAxHH/EfIxXBYvfA67D884w1ruquOin2STXcvxu+hi4Ob2hgTd7L5X
iyWlRCERi98+mzZSIWitW/HwmuXjB5u8i2M+/s2E5HFG0R4zpd4KU556JHDe6v9B
UQ4HNIPlCOF6U3ocWleORN9oUrJ+q33erP2J3yLSJdUeH0Rmblo3uI9EobqqCIQQ
as6GrhmVycgxxT0iBne0fAMsrnJOMBNigT0waLEdz6hi7TJ6kHgTkYa9e9r4HceH
OAAV1ri63w3p2jhOD+ZmUurAsOD/+F142daAaE4k2My4gSecxqetZQ==R22x
-----END PGP SIGNATURE-----

Steffen Kaiser wrote:
> On Thu, 25 Feb 2016, Chris wrote:
>
>> is it possible to temporarily reject mails, when quota of public
>> namespace
>> subfolder is exceeded? I'd check folder size with a cronjob.
>
> How does the MTA know that the message is filed into a public namespace?
deliver -m Public.somebox
> you mean users drop messages via Sieve script there? Yes, removing post
> and insert is a solution, but the message is still excepted by the MTA and
> generates a DSN if not resolved in a time.
I meant dovecot users are virtual. Dovecot runs as vmail system user, so
changing ACLs is probably not possible.