dovecot - Mar 2015 - IP drop list

> >>>
http://wiki2.dovecot.org/PasswordDatabase/ExtraFields/AllowNets
rethink why its allownets not denynets
> 45K+ IPs will work in a recent table
> i have them too but for smtp only like
have you seem a single user with 45k ips that does not make logs of login 
fails ?

Am 02.03.2015 um 20:01 schrieb Benny Pedersen:
> 
>> >>>
http://wiki2.dovecot.org/PasswordDatabase/ExtraFields/AllowNets
> 
> rethink why its allownets not denynets
> 
>> 45K+ IPs will work in a recent table
>> i have them too but for smtp only like
> 
> have you seem a single user with 45k ips that does not make logs of
> login fails ?
the most problem may nat and false positves, with firewall or deny ip
stuff you may ban wanted users too, so this should be only used in heavy
cases, so there is no ultimate solution which fits every case on every setup


Best Regards
MfG Robert Schetterer

-- 
[*] sys4 AG

http://sys4.de, +49 (89) 30 90 46 64
Franziskanerstra?e 15, 81669 M?nchen

Sitz der Gesellschaft: M?nchen, Amtsgericht M?nchen: HRB 199263
Vorstand: Patrick Ben Koetter, Marc Schiffbauer
Aufsichtsratsvorsitzender: Florian Kirstein

On March 2, 2015 8:32:35 PM Robert Schetterer <rs at sys4.de> wrote:
> the most problem may nat and false positves, with firewall or deny ip
> stuff you may ban wanted users too, so this should be only used in heavy
> cases, so there is no ultimate solution which fits every case on every
setup
yep pop-before-smtp was simple once, here i just allow in country users 
with xtables geoip, out of country is vacation users with no life :)

geoip have here low mem footprint, so i prefer it so