[Dovecot] v1.1 max connections per user

[Timo Sirainen]

On Sat, 2007-06-30 at 19:11 -0400, Charles Marcus wrote:
> Timo Sirainen, on 6/30/2007 6:43 PM, said the following:
> > v1.1 has now:
> > 
> > # Maximum number of connections allowed for a user. The limits are enforced
> > # separately for IMAP and POP3 connections, so you can move this setting
> > # inside protocol {} to have separate settings for them. NOTE: The user names
> > # are compared case-sensitively, so make sure your userdb returns usernames
> > # always using the same casing so users can't bypass this limit!
> > #mail_max_user_connections = 10
> > 
> > Is 10 a good default?
> 
> I'm assuming this is per IP?

No. I'm not sure if it should. Perhaps. It's mostly intended to prevent
unintentional abuse by stupid clients, so having 3+ thunderbirds open in
different locations with each having 5 connections should probably be
allowed.

> In Courier, there were two settings:
> 
> MAXDAEMONS = 40
> (total number of IMAP connections the server would accept)

Dovecot has max_mail_processes defaulting to 1024.


> I think it would be a good thing to have both, *and* to allow for 
> setting the MAXPERIP on both a per user and global basis (if a per user 
> value is not provided it uses the global default).
> 
> Later, adding the ability to set them both on a per domain basis, and 
> the MAXPERIP on a per domain/user basis would be even better...

All of these seem to be for handling intentional abuse. v2.0 maybe.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://dovecot.org/pipermail/dovecot/attachments/20070701/3e9511a4/attachment-0001.bin