fix: do not rate limit our own servers

forwardemail · Sep 29, 2023 · b7b00d3 · b7b00d3
1 parent 7347e93
commit b7b00d3
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/smtp-server.js b/smtp-server.js
@@ -562,7 +562,12 @@ async function onAuth(auth, session, fn) {
     //
     // only rate limit if the domain has_smtp
     //
-    if (domain.has_smtp) {
+    if (
+      domain.has_smtp &&
+      // do not rate limit IP addresses corresponding to our servers
+      (!session.resolvedClientHostname ||
+        parseRootDomain(session.resolvedClientHostname) !== env.WEB_HOST)
+    ) {
       // rate limit to X failed attempts per day by IP address
       const limit = await this.rateLimiter.get({
         id: session.remoteAddress,