Re: [Dovecot] Configure unsuccessful login attempts

2010-06-03 Thread Jerrale Gayle
On 6/3/2010 6:55 AM, Greg Pearson wrote: Hi, using PAM, how can I configure how many attempts a user can make to connect, and if exceeding a certain number, block him for a specified amount of time? Any idea what the defaults are? If pam make a log entry, then fail2ban will do whatever you wa

Re: [Dovecot] Configure unsuccessful login attempts

2010-06-03 Thread Jerrale Gayle
On 6/3/2010 7:13 AM, Greg Pearson wrote: You could use fail2ban, see also: http://wiki.dovecot.org/HowTo/Fail2Ban So I guess the result would be to the login process become unresponsive, right? I am not sure this would be what I want. The desired behaviour for me would be to reject the connec

Re: [Dovecot] Configure unsuccessful login attempts

2010-06-03 Thread Eray Aslan
On 06/03/2010 01:55 PM, Greg Pearson wrote: > using PAM, how can I configure how many attempts a user can make to > connect, and if exceeding a certain number, block him for a specified > amount of time? man 8 pam_tally man 8 pam_tally2 > Any idea what the defaults are? Default is not to block

Re: [Dovecot] Configure unsuccessful login attempts

2010-06-03 Thread Eray Aslan
On 06/03/2010 02:13 PM, Greg Pearson wrote: > The desired behaviour > for me would be to reject the connection even if the password becomes > correct after several failures. No. This is a bad idea. Anyone can easily DoS you if you go that route. -- Eray

Re: [Dovecot] Configure unsuccessful login attempts

2010-06-03 Thread Greg Pearson
You could use fail2ban, see also: http://wiki.dovecot.org/HowTo/Fail2Ban So I guess the result would be to the login process become unresponsive, right? I am not sure this would be what I want. The desired behaviour for me would be to reject the connection even if the password becomes correct

Re: [Dovecot] Configure unsuccessful login attempts

2010-06-03 Thread Pascal Volk
On 06/03/2010 12:55 PM Greg Pearson wrote: > Hi, > using PAM, how can I configure how many attempts a user can make to > connect, and if exceeding a certain number, block him for a specified > amount of time? > > Any idea what the defaults are? You could use fail2ban, see also: http://wiki.dove

[Dovecot] Configure unsuccessful login attempts

2010-06-03 Thread Greg Pearson
Hi, using PAM, how can I configure how many attempts a user can make to connect, and if exceeding a certain number, block him for a specified amount of time? Any idea what the defaults are?