On Thu, Mar 22, 2018 at 1:41 PM, Joseph Tam jtam.home@gmail.com wrote:
On Thu, 22 Mar 2018, Markus Eckerl wrote:
The problem is, that he misconfigured the servers of these customers. In
detail: their servers are trying to fetch email every 2 - 5 seconds. For every email address.
In the past I contacted the technician and told him about his mistake. He was not very helpful and simply told me that he is doing the same configuration since several years at all of his customer servers. Without problems. It is up to me to fix my problem myself.
Seems to me you're bending over backwards to fix someone else's problem, and what you really need is an "attitude adjustment" tool for obnoxious clients who use your service like they're the only ones that matter.
Apart from what others can suggest (I think dovecot allows delegation of usage to a separate policyd service), you can perhaps use firewall throttling e.g.
https://making.pusher.com/per-ip-rate-limiting-with-iptables/It can't do it per user, but perhaps it is better to set a global limit and let your downstream client better manage and conserve a limited resource.
Might be a good use of the new authpolicy stuff. You could run a local weakforced with 1 minute windows and break auth for certain IPs that do more than one login per minute.