Re: [Dovecot] limiting number of login attempts from same ip

On 06/13/2011 04:49 PM, Jürgen Obermann wrote:

I admit that fail2ban can stop this attack, but we have solaris and not linux and therefore the actions fail3ban wants to start are not available.

You may be interested in OSSEC for this. I added the Dovecot support and OSSEC supports Solaris, so I imagine this would work fine (although I don't use Solaris so I can't say for sure.) If the logs turn out to be slightly different I can update the decoder to accommodate.