Re: dictionary attack defense

2014-10-22 Thread Joseph Tam
Cliff Hayes writes: a) I read about auth_failure_delay even before I posted my question and I could not figure out the one-line explanation in the dovecot wiki: "Number of seconds to delay before replying to failed authentications." It's delaying a reply. Does that mean the hacker can keep ask

Re: dictionary attack defense

2014-10-22 Thread Cliff Hayes
Good idea! Thanks! On 10/22/2014 3:55 AM, Reindl Harald wrote: Am 22.10.2014 um 05:59 schrieb Cliff Hayes: a) I read about auth_failure_delay even before I posted my question and I could not figure out the one-line explanation in the dovecot wiki: "Number of seconds to delay before replying to

Re: dictionary attack defense

2014-10-22 Thread Reindl Harald
Am 22.10.2014 um 05:59 schrieb Cliff Hayes: a) I read about auth_failure_delay even before I posted my question and I could not figure out the one-line explanation in the dovecot wiki: "Number of seconds to delay before replying to failed authentications." It's delaying a reply. Does that mea

Re: dictionary attack defense

2014-10-21 Thread Cliff Hayes
a) I read about auth_failure_delay even before I posted my question and I could not figure out the one-line explanation in the dovecot wiki: "Number of seconds to delay before replying to failed authentications." It's delaying a reply. Does that mean the hacker can keep asking as fast as he w

Re: dictionary attack defense

2014-10-21 Thread Reindl Harald
Am 22.10.2014 um 01:12 schrieb Benny Pedersen: On October 22, 2014 12:57:34 AM Anders Wegge Keller wrote: On Tue, 21 Oct 2014 16:28:46 -0500 Cliff Hayes wrote: > Does dovecot have any dictionary attack defenses yet? In my opinion, fail2ban is the right strategy to deal with a dictionary at

Re: dictionary attack defense

2014-10-21 Thread Anders Wegge Keller
On Wed, 22 Oct 2014 01:12:02 +0200 Benny Pedersen wrote: > On October 22, 2014 12:57:34 AM Anders Wegge Keller wrote: > > > On Tue, 21 Oct 2014 16:28:46 -0500 > > Cliff Hayes wrote: > > > Does dovecot have any dictionary attack defenses yet? > > In my opinion, fail2ban is the right strategy

Re: dictionary attack defense

2014-10-21 Thread Benny Pedersen
On October 22, 2014 12:57:34 AM Anders Wegge Keller wrote: On Tue, 21 Oct 2014 16:28:46 -0500 Cliff Hayes wrote: > Does dovecot have any dictionary attack defenses yet? In my opinion, fail2ban is the right strategy to deal with a dictionary attack. Fokus should just be reversed to allow ip

Re: dictionary attack defense

2014-10-21 Thread Anders Wegge Keller
On Tue, 21 Oct 2014 16:28:46 -0500 Cliff Hayes wrote: > Does dovecot have any dictionary attack defenses yet? > In the past I have had to implement defense from outside dovecot, but > since dovecot is at the front lines and therefore is the first to know > I'm hoping by now there is something w

Re: dictionary attack defense

2014-10-21 Thread Reindl Harald
Am 21.10.2014 um 23:28 schrieb Cliff Hayes: Does dovecot have any dictionary attack defenses yet? In the past I have had to implement defense from outside dovecot, but since dovecot is at the front lines and therefore is the first to know I'm hoping by now there is something we can set. For ex