[Dovecot] limiting number of login attempts from same ip

[Michael Starks]

On 06/13/2011 04:49 PM, Jürgen Obermann wrote:

> I admit that fail2ban can stop this attack, but we have solaris and not
> linux and therefore the actions fail3ban wants to start are not available.

You may be interested in OSSEC for this. I added the Dovecot support and 
OSSEC supports Solaris, so I imagine this would work fine (although I 
don't use Solaris so I can't say for sure.) If the logs turn out to be 
slightly different I can update the decoder to accommodate.