On Mon, 2009-11-09 at 09:01 +0100, Steffen Kaiser wrote: > > Any thoughts? > > The only two remarks I have are that some well-known IPs should be able to > bypass this check, e.g. NATed gateways of the organisation
Hmm. That seems like way too much trouble. Even just on/off setting annoys me. > and that > external IDSs (e.g. fail2ban) should be able to pick up the possible > breakin, maybe you can configure Dovecot to send failed logins to syslog, > too, even though it logs to file normally. This also seems kind of weird.. Why couldn't fail2ban or whatever just parse the normal log files? Or maybe you should just configure syslog to log to those two different locations?
signature.asc
Description: This is a digitally signed message part
