Hi,
when I read the mail.log, I found: Nov 14 14:45:45 mail dovecot: pop3-login: Disconnected (no auth attempts in 2 secs): user=<>, rip=96.126.111.38, lip=108.61.22.11, TLS handshaking: SSL_accept() syscall failed: Connection reset by peer, session=<WEd2MD1B/Mdgfm8m> Nov 14 14:45:47 mail dovecot: pop3-login: Disconnected (no auth attempts in 2 secs): user=<>, rip=96.126.111.38, lip=108.61.22.11, TLS handshaking: SSL_accept() syscall failed: Connection reset by peer, session=<H42OMD1BZslgfm8m> Nov 14 14:45:47 mail dovecot: pop3-login: Error: SSL: Stacked error: error:1407609C:SSL routines:SSL23_GET_CLIENT_HELLO:http request Nov 14 14:45:47 mail dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=96.126.111.38, lip=108.61.22.11, TLS handshaking: SSL_accept() failed: Unknown error, session=<rQ6QMD1BxMpgfm8m> Nov 14 14:45:47 mail dovecot: pop3-login: Error: SSL: Stacked error: error:1408A10B:SSL routines:ssl3_get_client_hello:wrong version number Nov 14 14:45:47 mail dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=96.126.111.38, lip=108.61.22.11, TLS handshaking: SSL_accept() failed: Unknown error, session=<3DqTMD1BKstgfm8m> Nov 14 14:45:49 mail dovecot: pop3-login: Disconnected (no auth attempts in 2 secs): user=<>, rip=96.126.111.38, lip=108.61.22.11, TLS, session=<CCqyMD1BdMtgfm8m> Was the Dovecot working well? Are there any good solutions to forbid this kind of behavior to enhance the mail server? thanks.