[Dovecot] Fail2Ban and the Dovecot log

Ed W lists at wildgooses.com
Tue May 12 21:45:26 EEST 2009


Lou Duchez wrote:
> So any failure at any of the three protocols (SMTP, POP3, IMAP) is 
> considered a "strike" by all three, and they should all ban the same 
> guys at the same time.  This is as yet untested, but seems like it 
> should be pretty sound.


I think you only need one service and you can use the iptables-multi (or 
something similar) to block all the ports if you get a hit?

Ed W


More information about the dovecot mailing list