Access Control for POP3 / IMAP
Martin Schwartz
martin.schwartz at java-info.de
Sat Feb 10 08:59:40 EST 2007
Thanks!
Am Donnerstag, den 08.02.2007, 13:11 -0800 schrieb Huaqing Zheng:
> > - do you know of a (cyrus or non cyrus) way to block or slow down the
> > access for an IP / username after n insuccessful login attempts?
>
> Check out fail2ban. It's a script that sits and looks at the logs of
> your choice for failed access attempts and then adds iptable rules to
> block IP addresses for a period of time based on number of fail access
> attempts. Should be fairly easy to configure it to look at your cyrus
> log and block brute force attacks.
More information about the Cyrus-sasl
mailing list