<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>Yes I've read imapd.conf and cyrus.conf and found no options to
limit connections per source IP or "idleness".. <br>
</p>
<p>It means anyone can open a lot of connections to any port (143,
25, 110 etc) and render the server unusable??</p>
<p>I'm using Debian, so I'll try to figure out how to do that with
iptables.. Thanks!<br>
</p>
<p><br>
</p>
<pre class="moz-signature" cols="72">Best Regards,
Heiler Bensimon Bemerguy - CINBESA
Analista de Redes, Wi-Fi,
Virtualização e Serviços Internet
(55) 91 98151-4894</pre>
<div class="moz-cite-prefix">Em 07/03/2019 11:25, Willem Offermans
escreveu:<br>
</div>
<blockquote type="cite"
cite="mid:009A6994-69AF-4EAA-8A63-8C214E3F1780@Offermans.Rompen.nl">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<span class="">Dear Cyrus friends and Heiler Bensimon Bemerguy,<br
class="">
</span>
<div class=""><br class="">
</div>
<div class="">You could use your firewall to achieve this.</div>
<div class=""><br class="">
</div>
<div class="">For ipfw:</div>
<div class=""><br class="">
</div>
<div class="">${fwcmd} add pass tcp from any to ${ip_me} imap
setup limit src-addr 10</div>
<div class=""><br class="">
</div>
<div class="">You have to lookup the right syntax for your
firewall.</div>
<div class=""><br class="">
</div>
<div class="">Dit you check man imapd or man cyrus, maybe there is
also an option for the daemon itself, but I would prefer the
firewall. </div>
<div class=""><br class="">
</div>
<br class="">
<div class="">
<div dir="auto" style="word-wrap: break-word; -webkit-nbsp-mode:
space; line-break: after-white-space;" class="">
<div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);
font-family: Helvetica; font-size: 12px; font-style: normal;
font-variant-caps: normal; font-weight: normal;
letter-spacing: normal; text-align: start; text-indent: 0px;
text-transform: none; white-space: normal; word-spacing:
0px; -webkit-text-stroke-width: 0px; text-decoration: none;">Wiel
Offermans</div>
<div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);
font-family: Helvetica; font-size: 12px; font-style: normal;
font-variant-caps: normal; font-weight: normal;
letter-spacing: normal; text-align: start; text-indent: 0px;
text-transform: none; white-space: normal; word-spacing:
0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><a
href="mailto:Willem@Offermans.Rompen.nl" class=""
moz-do-not-send="true">Willem@Offermans.Rompen.nl</a></div>
<div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);
font-family: Helvetica; font-size: 12px; font-style: normal;
font-variant-caps: normal; font-weight: normal;
letter-spacing: normal; text-align: start; text-indent: 0px;
text-transform: none; white-space: normal; word-spacing:
0px; -webkit-text-stroke-width: 0px; text-decoration: none;"
class=""><br class="">
</div>
<br class="Apple-interchange-newline">
</div>
<br class="Apple-interchange-newline">
</div>
<div><br class="">
<blockquote type="cite" class="">
<div class="">On 7 Mar 2019, at 14:53, Heiler Bemerguy via
Info-cyrus <<a
href="mailto:info-cyrus@lists.andrew.cmu.edu" class=""
moz-do-not-send="true">info-cyrus@lists.andrew.cmu.edu</a>>
wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<div class="">Hail,<br class="">
<br class="">
I've noticed an user with ~200 open connections to cyrus
imap port (143) and, because of him, no one else could
login to the server.<br class="">
<br class="">
I've noticed even with a single "telnet ip 143", the
connection is accepted and never ever dropped, even while
still unauthenticated.<br class="">
<br class="">
How to stop that from happening?<br class="">
<br class="">
cyrus.conf:<br class="">
imap cmd="imapd -U 30" listen="imap" prefork=6
maxchild=200<br class="">
<br class="">
<br class="">
-- <br class="">
Atenciosamente,<br class="">
<br class="">
Heiler Bensimon Bemerguy - CINBESA<br class="">
Analista de Redes, Wi-Fi,<br class="">
Virtualização e Serviços Internet<br class="">
(55) 91 98151-4894<br class="">
<br class="">
----<br class="">
Cyrus Home Page: <a href="http://www.cyrusimap.org/"
class="" moz-do-not-send="true">http://www.cyrusimap.org/</a><br
class="">
List Archives/Info: <a
href="http://lists.andrew.cmu.edu/pipermail/info-cyrus/"
class="" moz-do-not-send="true">http://lists.andrew.cmu.edu/pipermail/info-cyrus/</a><br
class="">
To Unsubscribe:<br class="">
<a
href="https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus"
class="" moz-do-not-send="true">https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus</a></div>
</div>
</blockquote>
</div>
<br class="">
</blockquote>
</body>
</html>