search for: denynet

Dave McGuire writes: >> http://wiki2.dovecot.org/PasswordDatabase/ExtraFields/AllowNets >> >> then setup fail2ban to manage extrafields > > Now that's a very interesting idea, thank you! I will investigate this. If you don't expect yor firewall to handle 45K+ IPs, I'm not how you expect dovecot will handle a comma separated string with 45K+ entries any

> >>> http://wiki2.dovecot.org/PasswordDatabase/ExtraFields/AllowNets rethink why its allownets not denynets > 45K+ IPs will work in a recent table > i have them too but for smtp only like have you seem a single user with 45k ips that does not make logs of login fails ?

On March 2, 2015 10:50:59 PM Dave McGuire <mcguire at neurotica.com> wrote: > On 03/02/2015 05:34 AM, Joseph Tam wrote: > >>> http://wiki2.dovecot.org/PasswordDatabase/ExtraFields/AllowNets its not a big hint its not called denynets is it ? > I myself just want a mechanism to deny certain IP addresses when I > spot them, regardless of the implementation. But anything that offloads > my mail servers from anything that doesn't involve serving mail makes me > happy. fokus on not blocking 500000 ips, but that...

Am 02.03.2015 um 20:01 schrieb Benny Pedersen: > >> >>> http://wiki2.dovecot.org/PasswordDatabase/ExtraFields/AllowNets > > rethink why its allownets not denynets > >> 45K+ IPs will work in a recent table >> i have them too but for smtp only like > > have you seem a single user with 45k ips that does not make logs of > login fails ? the most problem may nat and false positves, with firewall or deny ip stuff you may ban wanted user...

I wonder if there is an easy way to provide dovecot a flat text file of ipv4 #'s which should be ignored or dropped? I have accumulated 45,000+ IPs which routinely try dictionary and 12345678 password attempts. The file is too big to create firewall drops, and I don't want to compile with wrappers *if* dovecot has an easy ability to do this. If dovecot could parse a flat text file of