[Dovecot] disconnect after too many errors?

[Peter Hessler]

On 2007 Dec 09 (Sun) at 00:20:11 +0200 (+0200), Timo Sirainen wrote:
> On 9.12.2007, at 0.16, Peter Hessler wrote:
>
>> There are a couple of jerks that are tying to dictionary attack my
>> email server, and one of the vectors is pop3/imap logins.  Something I
>> would like to do in dovecot, but can't seem to find, is the ability to
>> disconnect after a certain number of errors.  The vast majority of my
>> users (i.e. me) don't hand-type POP3 or IMAP transactions, but when we
>> do, we know how to spell things properly.
>>
>> Does dovecot have this?  A simiple look shows no.
>
> It's hardcoded to src/imap-login/client.c:
>
> #define CLIENT_MAX_BAD_COMMANDS 10
>

It looks like that doesn't apply to failed logins.



-- 
A witty saying proves nothing, but saying something pointless gets
people's attention.