[Dovecot] How to limit max number of connections for ip address

Timo Sirainen tss at iki.fi
Fri Feb 24 01:21:44 EET 2012

On 24.2.2012, at 0.33, Wilberth Perez wrote:

> Does any one , knows if is possible configure dovecot for limit max
> number of connections for IP address?
> I would  like to prevent future fork-bombing attacks for pop3 and imap
> login process in my email server.
> Our dovecot version is : 1.2.10

There is mail_max_userip_connections setting which limits IP+username combination. Typically that should be enough to prevent fork bombing, because users normally don't have more than one account.

Or you mean when some IP keeps connecting even without actually loggin in? http://wiki.dovecot.org/LoginProcess has some settings related to this, which should normally be quite helpful if the limits are right.

More information about the dovecot mailing list