9 Dec
2007
9 Dec
'07
12:20 a.m.
On 9.12.2007, at 0.16, Peter Hessler wrote:
There are a couple of jerks that are tying to dictionary attack my email server, and one of the vectors is pop3/imap logins. Something I would like to do in dovecot, but can't seem to find, is the ability to disconnect after a certain number of errors. The vast majority of my users (i.e. me) don't hand-type POP3 or IMAP transactions, but when we do, we know how to spell things properly.
Does dovecot have this? A simiple look shows no.
It's hardcoded to src/imap-login/client.c:
#define CLIENT_MAX_BAD_COMMANDS 10