dovecot - May 2013 - Any way to let dovecot block pop3 attempts?

Is there a way using dovecot facilities to block an IP from attempting 
POP3 connections (similar to the sendmail access file for smtp 
connections)? I usually do this at my border firewall, but if there's a 
quick and dirty way in dovecot to do this, it'd make life a little simpler.

Thanks

steve campbell

On Friday 10 May 2013 08:17:50 Steve Campbell wrote:
> Is there a way using dovecot facilities to block an IP from attempting
> POP3 connections (similar to the sendmail access file for smtp
> connections)? I usually do this at my border firewall, but if there's a
> quick and dirty way in dovecot to do this, it'd make life a little
simpler.
> 
Hi Steve,

We've been using Fail2Ban on our mail proxies for a while without any 
problem.

It may be what you're looking for.


Regards,
Gilles.

On 05/10/13 08:17 AM, Steve Campbell wrote:
> Is there a way using dovecot facilities to block an IP from attempting 
> POP3 connections (similar to the sendmail access file for smtp 
> connections)? I usually do this at my border firewall, but if there's 
> a quick and dirty way in dovecot to do this, it'd make life a little 
> simpler.
How about TCP wrappers?
http://wiki2.dovecot.org/LoginProcess - "Login access check sockets" -
"TCP wrappers support"

Did you have a look at this?
http://wiki2.dovecot.org/Authentication/RestrictAccess

On 5/10/2013 5:17 AM, Steve Campbell wrote:
> Is there a way using dovecot facilities to block an IP from attempting 
> POP3 connections (similar to the sendmail access file for smtp 
> connections)? I usually do this at my border firewall, but if there's 
> a quick and dirty way in dovecot to do this, it'd make life a little 
> simpler.
>
> Thanks
>
> steve campbell

Steve Campbell writes:
> I use Centos and the default dovecot RPM. I seem to recall there was a 
> way to determine if dovecot was built with "--with-libwrap". Can
anyone
> shed light on how to determine this, please?
Maybe

 	dovecot  --build-options

Or you can just test it directly by denying a connection to a test host.

Joseph Tam <jtam.home at gmail.com>

Steve Campbell skrev den 2013-05-10 14:17:
> Is there a way using dovecot facilities to block an IP from
> attempting POP3 connections (similar to the sendmail access file for
> smtp connections)? I usually do this at my border firewall, but if
> there's a quick and dirty way in dovecot to do this, it'd make life
a
> little simpler.
google fail2ban, if you using still not using ssl/tls then change to 
ssl/tls will help aswell, it worked for me, kids still not handle 
ssl/tls very well these days :)

when ssl/tls works drop service on ports without it

-- 
senders that put my email into body content will deliver it to my own 
trashcan, so if you like to get reply, dont do it