Throttling pop3-login connections

[Reindl Harald]

Am 08.08.2014 um 22:40 schrieb Gene Heskett:
> On Friday 08 August 2014 14:11:21 Alex did opine
>> I have a fedora20 system with dovecot-2.2.13 running various services,
>> including pop3. I'm noticing some users are frequently hamming pop3,
>> and wondered if this was normal, or something I should be
>> investigating?
>>
>> Aug  8 14:05:20 email dovecot: pop3-login: Login: user=<user1>,
>> method=PLAIN, rip=97.77.115.121, lip=192.168.1.1, mpid=30509,
>> session=<DnRtDCIAUQBhTXN5>
>> Aug  8 14:05:21 email dovecot: pop3(user1): Disconnected: Logged out
>> top=0/0, retr=0/0, del=0/15, size=5693601

i would ask the user to change at least to 3 minutes instead 1
44000 loglines per month and user is a lot if everybody would do that

> I just noticed the rip address and the local address aren't even in the 
> same network block, that would make me check your network as NO 
> 192.168.xx.xx address is supposed to be accessible from a world wide 
> address beyond your router unless you've enabled a port forward rule in 
> the router

that's why it is the *local* IP
just normal in any case of proxying

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: OpenPGP digital signature
URL: <http://dovecot.org/pipermail/dovecot/attachments/20140808/8d8b04a7/attachment.sig>