Jaroslaw Rafa: [IMAP before SMTP] > That's the usual way mail clients work: they first open an IMAP > connection and keep it open all the time, and only when you want > to send mail, they connect to a submission service. > > Only I don't know, is there an easy way to get from Dovecot a list > of IPs that have currently open IMAP sessions? > > I know this is not a Dovecot list, but maybe someone here knows > answer to this? Or maybe someone already wrote such a piece of > software and it sits somewhere in the Net ready to grab?
If dovecot logs the client IP address then a fail2ban action could 'find' it and add the address to an allowlist. Wietse