> The other side of this equation, Postfix, has had this capability > for years. Why it hasn't been added to dovecot is a mystery. It's > the only thing (really, the ONLY thing!) that I dislike about dovecot. http://wiki2.dovecot.org/PasswordDatabase/ExtraFields/AllowNets then setup fail2ban to manage extrafields