<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"></head><body><div>Or you can implement a policy server yourself. :)</div><div>The protocol is not complicated, json over http. See https://wiki.dovecot.org/Auth/Policy</div><div><br></div><div><br></div><div><br></div><div id="composer_signature"><meta http-equiv="Content-Type" content="text/html; charset=UTF-8">---<div>Aki Tuomi</div><div>Dovecot oy</div></div><div><br></div><div style="font-size:100%;color:#000000"><!-- originalMessage --><div>-------- Original message --------</div><div>From: Aki Tuomi <aki.tuomi@dovecot.fi> </div><div>Date: 21/05/2018 19:13 (GMT+02:00) </div><div>To: Marc Perkel <marc@perkel.com>, dovecot@dovecot.org </div><div>Subject: Re: Dovecot blacklist? </div><div><br></div></div><div><br></div><div>https://github.com/PowerDNS/weakforced cn be used for this.</div><div><br></div><div><br></div><div id="composer_signature"><meta http-equiv="Content-Type" content="text/html; charset=UTF-8">---<div>Aki Tuomi</div><div>Dovecot oy</div></div><div><br></div><div style="font-size:100%;color:#000000"><!-- originalMessage --><div>-------- Original message --------</div><div>From: Marc Perkel <marc@perkel.com> </div><div>Date: 21/05/2018 19:09 (GMT+02:00) </div><div>To: dovecot@dovecot.org </div><div>Subject: Dovecot blacklist? </div><div><br></div></div>Just wondering if there is an easy way to have dovecot do a blacklist <br>lookup as a negative authentication so that if the IP is on a blacklist <br>then authentification fails even if they get the password right.<br><br>If this works I have a blacklist everyone can use.<br><br></body></html>