[Dovecot] Throttle New Connections?

Joseph W. Breu breu at cfu.net
Mon Nov 19 19:28:44 EET 2007


This may be off topic - but you could always use something like imapproxy in
front of your dovecot IMAP daemon.  We do this locally for our webmail
clients which use IMAP for the access to the mail store.

Imapproxy can be found here: http://imapproxy.org/



-----Original Message-----
From: dovecot-bounces+breu=cfu.net at dovecot.org
[mailto:dovecot-bounces+breu=cfu.net at dovecot.org] On Behalf Of Joe Allesi -X
(joallesi - Coyote Creek Consulting at Cisco)
Sent: Monday, November 19, 2007 11:25 AM
To: Dovecot Mailing List
Subject: [Dovecot] Throttle New Connections?

All,

Is anyone using iptables (recent module), or any other alternatives, to
throttle the number of new imap or pop connections per minute? We have
some applications that like to login every second to pull mail using
imap, so we'd like to protect the entire dovecot server from these
applications. We've already made the change over to high-perf mode, but
we still need some type of denial of service protection. Any real-world
data would be appreciated.

Thanks!



More information about the dovecot mailing list