[Dovecot] limiting the per-time connections from one single IP address

Rick Romero rick at havokmon.com
Mon Jul 28 18:28:13 EEST 2008


On Mon, 2008-07-28 at 17:23 +0200, suomi wrote:
> Hi every
> we had a havy pop3 attach yesterday morning: about 400'000 connects in 
> three hours from one single IP address within wandadoo.fr.
> 
> the easiest way, to protect the dovecot server against such attacks 
> would be to limit the number of connections anyone can open from one 
> single IP address to the server in a certain time.

It's available in 1.1:

 # Maximum number of POP3 connections allowed for a user from each IP
address.
  # NOTE: The username is compared case-sensitively.
  #mail_max_userip_connections = 3

Rick



More information about the dovecot mailing list