Re: OT: IMAP under attack

Nic Bernstein <[email protected]>
Newsgroups gmane.mail.imap.cyrus
Message-ID <[email protected]>
On 1/8/22 07:03, Andrea Venturoli wrote:
> So is it possible to tell Cyrus to throttle reponse?
> I.e. fail fast at the first failed login, take 2 seconds for the 
> second, 5 for the third, etc...
> Keeping in mind that fail2ban will block them anyway at the fifth 
> attempt, but this would slow down them further.

Yes, it is possible.  Take a look at imapd.conf(5) for details.  You 
should be interested in the 'failedloginpause' setting, which defaults 
to 3 seconds.

Cheers,
     -nic

-- 
Nic Bernstein                               [email protected]
https://www.nicbernstein.com
https://www.linkedin.com/in/nic-b-26577a178/


------------------------------------------
Cyrus: Info
Permalink: https://cyrus.topicbox.com/groups/info/T1d0fcd8364d69d1f-Md371b417fde223893d892791
Delivery options: https://cyrus.topicbox.com/groups/info/subscription
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.