[Dovecot] Limit login attempts per connection?

Tony Nelson tonynelson at georgeanelson.com
Fri Mar 5 06:43:25 EET 2010


On 10-03-04 20:22:15, Frank Cusack wrote:
> On 3/4/10 6:42 PM -0500 Tony Nelson wrote:
> > Looking at the source, I see that there are no options.  It tarpits
> > a bit, but currently has no limit on the number of attempts.  I'll
> > see what I can do.
> 
> I think it's a brilliant idea.  After one login attempt, all others
> on the same connection should fail.

A fan!  Anyway, there should at least be a choice.  Not that I've coded
a choice, just a dumb patch -- see attachment.  It's a bit of a
compromise, with a hard-coded limit of 4 attempts.  Maybe I'll lower it
to 2.

-- 
____________________________________________________________________
TonyN.:'                       <mailto:tonynelson at georgeanelson.com>
       '                              <http://www.georgeanelson.com/>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: dovecot-1.2-limitauth.patch
Type: text/x-patch
Size: 1382 bytes
Desc: not available
Url : http://dovecot.org/pipermail/dovecot/attachments/20100304/4eb98a72/attachment.bin 


More information about the dovecot mailing list