Re: [Dovecot] SQL/LDAP Lockouts?

This sounds like something that should go in a pam module.

Yep - indeed. If your system supports pam of course :)

Then again, the convention net.wisdom at least -used- to be that this was a bad idea, because it became an easy DOS attack.

I take your point. But at the same time if there's no lockout mechanism a brute force attack will eventually guess the passwords.

Paul