Re: [Dovecot] script to detect dictionary attacks

Reindl Harald skrev den 2013-04-06 14:43:

has to do what with IMAP/POP3 Logins?

patch / hack it to dovecot

but nobody speaks about postfix

and nobody use sql logs

i speak about a simple way to get a notify of the brute-forcing IP and the both are MANUAL tasks i do since virtually forever

if it was simple, others have writed it already

http://wiki.dovecot.org/HowTo/Fail2Ban

note that it works on dovecot 1.x aswell, no need to upgrade :)