[Dovecot] pop3 rate limit

[Robert Schetterer]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Am 28.12.2013 14:05, schrieb Christian Rößner:
> Hi,
> 
> we have customers with Exchange servers that are polling for new
> mail every minute with dozens of pop3 accounts. I am looking for a
> mechanism to rate limit this per user. So what I am looking for is
> a way to block users from polling, if a user asks for new mail more
> than every 5 minutes (for example).
> 
> Is this possible? Can this be achieved within Dovecot or does it
> need external scripting? (I thought about fail2ban, but also want
> IPv6 support)

Hi Christian, i have about 1000 pop3 logins per minute, with little
tuning dovecot has no problem with it


but however you may use iptables recent, but for sure its not optimal
cause of nat

and/or grep login timestamps syslog and echo in deny list

http://wiki2.dovecot.org/Authentication/RestrictAccess

perhaps fail2ban can be configured to do equal actions

> 
> Thanks in advance
> 
> -Christian Rößner
> 
> -- [*] sys4 AG
> 
> http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669
> München
> 
> Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 
> Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer 
> Aufsichtsratsvorsitzender: Florian Kirstein
> 



Best Regards
MfG Robert Schetterer

- -- 
[*] sys4 AG

http://sys4.de, +49 (89) 30 90 46 64
Franziskanerstraße 15, 81669 München

Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263
Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer
Aufsichtsratsvorsitzender: Florian Kirstein
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJSwSjZAAoJEP8jBObu0LlE1n0IALpzRi2k7QaDkILMthMcRZwz
K7ukF0EVZmtGUt8uFJiEW1hWyyWRM3F5/KCwK7d39mTA+fEo54GhoAzrQrJkomnO
z+N3qWUj8MbKNx6vNbMH6b6qpSPKIPr913Al2vhxQ4Mp2EYI/630Xu1GuVVCzWyI
cUURYWFwNBNwExzzphYgKS8V1MU6EBt1g/ElaYY0uVwH0m3f8kxmLNbaswuQ5pga
dczxDtcIzMCsK/bxoSot8SKpSmNOkLEexBM5rb8UWKmHXFym1vTdHQHf/gYsAuv2
7ePsUcG3JCQO5pfi6q6psFDFTodXNttS89Np+0tdwVLqoSZ3DA3rdpknjnQALXQ=
=cYCD
-----END PGP SIGNATURE-----