Disable inbound emails for locked out users

Use the glide.pop3.process_locked_out property to control inbound email actions for locked out, active users.

The glide.pop3.process_locked_out system property controls inbound email actions for locked out users. If glide.pop3.process_locked_out is set to true, there may be an information disclosure as inbound emails would be received by users with locked accounts.

Ensure that the property glide.pop3.process_locked_out is set to false.

Note:

Consider the security implications of allowing users from untrusted domains, and why they were locked out, before allowing emails from them to trigger inbound email actions.

More information

Attribute	Description
Configuration name	glide.pop3.process_locked_out
Configuration type	System Properties (/sys_properties_list.do)
Data type	Boolean
Recommended value	false
Default value	<none>
Fallback value	false
Category	Access control
Security risk	Severity score: 7.5 CVSS rating: High Security risk details: Allows locked-out users to continue submitting inbound emails that may create records or trigger workflows, posing a security risk by enabling potentially unauthorized actions.
Functional impact	None
Dependencies and prerequisites	None

To learn more about adding or creating a system property, see Add a system property.