Just wondering if there is an easy way to have dovecot do a blacklist lookup as a negative authentication so that if the IP is on a blacklist then authentification fails even if they get the password right.
If this works I have a blacklist everyone can use.
https://github.com/PowerDNS/weakforced cn be used for this.
---Aki TuomiDovecot oy -------- Original message --------From: Marc Perkel <marc@perkel.com> Date: 21/05/2018 19:09 (GMT+02:00) To: dovecot@dovecot.org Subject: Dovecot blacklist? Just wondering if there is an easy way to have dovecot do a blacklist lookup as a negative authentication so that if the IP is on a blacklist then authentification fails even if they get the password right.
If this works I have a blacklist everyone can use.
Or you can implement a policy server yourself. :)The protocol is not complicated, json over http. See https://wiki.dovecot.org/Auth/Policy
---Aki TuomiDovecot oy -------- Original message --------From: Aki Tuomi <aki.tuomi@dovecot.fi> Date: 21/05/2018 19:13 (GMT+02:00) To: Marc Perkel <marc@perkel.com>, dovecot@dovecot.org Subject: Re: Dovecot blacklist?
https://github.com/PowerDNS/weakforced cn be used for this.
---Aki TuomiDovecot oy -------- Original message --------From: Marc Perkel <marc@perkel.com> Date: 21/05/2018 19:09 (GMT+02:00) To: dovecot@dovecot.org Subject: Dovecot blacklist? Just wondering if there is an easy way to have dovecot do a blacklist lookup as a negative authentication so that if the IP is on a blacklist then authentification fails even if they get the password right.
If this works I have a blacklist everyone can use.
https://wiki.dovecot.org/Authentication/Policy is the correct link.
---Aki TuomiDovecot oy -------- Original message --------From: Aki Tuomi <aki.tuomi@dovecot.fi> Date: 21/05/2018 19:19 (GMT+02:00) To: Marc Perkel <marc@perkel.com>, dovecot@dovecot.org Subject: Re: Dovecot blacklist? Or you can implement a policy server yourself. :)The protocol is not complicated, json over http. See https://wiki.dovecot.org/Auth/Policy
---Aki TuomiDovecot oy -------- Original message --------From: Aki Tuomi <aki.tuomi@dovecot.fi> Date: 21/05/2018 19:13 (GMT+02:00) To: Marc Perkel <marc@perkel.com>, dovecot@dovecot.org Subject: Re: Dovecot blacklist?
https://github.com/PowerDNS/weakforced cn be used for this.
---Aki TuomiDovecot oy -------- Original message --------From: Marc Perkel <marc@perkel.com> Date: 21/05/2018 19:09 (GMT+02:00) To: dovecot@dovecot.org Subject: Dovecot blacklist? Just wondering if there is an easy way to have dovecot do a blacklist lookup as a negative authentication so that if the IP is on a blacklist then authentification fails even if they get the password right.
If this works I have a blacklist everyone can use.
participants (2)
-
Aki Tuomi
-
Marc Perkel