[BlueOnyx:22839] Re: email username

[Fungal Style]

My 2 bits woth…

I use the usernames and not full addresses, and it just means you need to have a plan, although when someone moves from another host that does use the full email address, it does create some teething issues at first but you soon learn how to get around most things, like as they are changing hosts they will also be best to change passwords anyway, so a change of username would also be advisable
9and most email applications do it in the same spot), especially if they changed hosts due to a data breach (which is one reason I have had customers move to my servers).

One plan to use is the field to prefix the user name, so for example john at smith.com<mailto:john at smith.com> and john at doe.com<mailto:john at doe.com> could have the usernames smi_john and doe_john respectively. So you do not need to suffix manually with numbers, but get the system to automatically prefix the user name, other management systems do it too, do it is not a new thing.

Have a look at your failed logins log via the gui, you will see most use the email address to try and brute force, or use a compromised password.

HTH

Regards
Brian

From: Blueonyx <blueonyx-bounces at mail.blueonyx.it> on behalf of Ken Hohhof <khohhof at kwom.com>
Reply-To: Blueonyx mailing list <blueonyx at mail.blueonyx.it>
Date: Monday, 22 April 2019 at 9:31 am
To: Blueonyx mailing list <blueonyx at mail.blueonyx.it>
Subject: [BlueOnyx:22838] Re: email username

We don’t use BlueOnyx for email, just webhosting, but we moved away from using just usernames probably 15 years ago.  Hardly any email system does it that way anymore.  The reason is simple, once you have user john or mary, you can’t have another john or mary at a different domain.  This is maybe OK if you are just hosting mail for your own domain, but I don’t see how that will work if you are hosting mail for multiple customer domains.

Yes, you could have john at foo.com<mailto:john at foo.com> with username john, and john at bar.com<mailto:john at bar.com> with username john2, but that seems very confusing.


From: Blueonyx <blueonyx-bounces at mail.blueonyx.it> On Behalf Of Greg Kuhnert
Sent: Sunday, April 21, 2019 6:01 PM
To: BlueOnyx General Mailing List <blueonyx at mail.blueonyx.it>
Subject: [BlueOnyx:22837] Re: email username

I would suggest this is not a great idea. If you have a look at failed login attempts on your server, you will notice most of them are email address formats. Combine that with many of the password breaches in the wild (unrelated to blueonyx), it is likely that a percentage of your users have compromised accounts but they dont know it. I have seen attacks using these compromised lists… but the fact that our email systems dont use email address for login has more than likely prevented entry by the bad actors.

GK



On Apr 22, 2019, at 12:31 AM, Kasey Matejcek <kasey at lkm.bz<mailto:kasey at lkm.bz>> wrote:

Is there a way to setup the email so the user name includes the domain
For the username user at domain.com<mailto:user at domain.com>
Right it just username and no domain
The new version of outlook is getting a hard to setup and imap account it want the username to be something at domain.com<mailto:something at domain.com>
I know I can get around it be going to the mail icon in the control panel and set it up there
Just going to roll out a new server and figure if I could get this setup I could save me sometime when users setup there emails going forward on the new server
_______________________________________________
Blueonyx mailing list
Blueonyx at mail.blueonyx.it<mailto:Blueonyx at mail.blueonyx.it>
http://mail.blueonyx.it/mailman/listinfo/blueonyx

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.blueonyx.it/pipermail/blueonyx/attachments/20190421/225fe16d/attachment.html>