Or you can implement a policy server yourself. :)
The protocol is not complicated, json over http. See https://wiki.dovecot.org/Auth/Policy



---
Aki Tuomi
Dovecot oy

-------- Original message --------
From: Aki Tuomi <aki.tuomi@dovecot.fi>
Date: 21/05/2018 19:13 (GMT+02:00)
To: Marc Perkel <marc@perkel.com>, dovecot@dovecot.org
Subject: Re: Dovecot blacklist?


https://github.com/PowerDNS/weakforced cn be used for this.


---
Aki Tuomi
Dovecot oy

-------- Original message --------
From: Marc Perkel <marc@perkel.com>
Date: 21/05/2018 19:09 (GMT+02:00)
To: dovecot@dovecot.org
Subject: Dovecot blacklist?

Just wondering if there is an easy way to have dovecot do a blacklist
lookup as a negative authentication so that if the IP is on a blacklist
then authentification fails even if they get the password right.

If this works I have a blacklist everyone can use.