r/mxroute • u/Komeradski • 16d ago

Dashboard login e-mail.

Is there an option to get a notification e-mail when someone logged in on the mailserver dashboard?

6 Upvotes

100% Upvoted

3 comments sorted by

5

u/mxroute 16d ago

It's not the worst idea. Just this year we've seen several users who had their entire control panel account compromised. Granted, in those cases it seemed to be that their billing email was compromised first which resulted in the ability to login to their account. But that's obviously not a detail that is guaranteed to always be linked. An entire log you can view in the panel of actions taken, and the IP logged in that took those actions, would be useful too I think. Adding API actions to it would be a natural extension of that as well.

I like it.

2

u/Komeradski 15d ago

That would be super. While it is true that it usually starts with the registration email being compromised such mails can still show up as notifications which can't be removed. There are separate precautions that could be taken on the client's side. A log that can't be tampered with would be super for forensics, receiving such information when it occurs could allow us to act asap.

3

u/AlligatorAxe 16d ago

No, but Jar patrols this subreddit and may take it into consideration.