RFE: dnsbl-support for dovecot

2014-06-17 Thread Reindl Harald
after having my own dnsbl feeded by a honeypot and even mod_security supports it for webservers i think dovecot sould support the same to prevent dictionary attacks from known bad hosts, in our case that blacklist is 100% trustable and blocks before SMTP-Auth while normal RBL's are after SASL i

Re: RFE: dnsbl-support for dovecot

2014-06-17 Thread Giles Coochey
On 17/06/2014 18:16, Reindl Harald wrote: after having my own dnsbl feeded by a honeypot and even mod_security supports it for webservers i think dovecot sould support the same to prevent dictionary attacks from known bad hosts, in our case that blacklist is 100% trustable and blocks before

Re: RFE: dnsbl-support for dovecot

2014-06-17 Thread Reindl Harald
Am 17.06.2014 19:43, schrieb Giles Coochey: On 17/06/2014 18:16, Reindl Harald wrote: after having my own dnsbl feeded by a honeypot and even mod_security supports it for webservers i think dovecot sould support the same to prevent dictionary attacks from known bad hosts, in our case that

Re: RFE: dnsbl-support for dovecot

2014-06-17 Thread Giles Coochey
On 17/06/2014 18:56, Reindl Harald wrote: Am 17.06.2014 19:43, schrieb Giles Coochey: On 17/06/2014 18:16, Reindl Harald wrote: after having my own dnsbl feeded by a honeypot and even mod_security supports it for webservers i think dovecot sould support the same to prevent dictionary attacks

Re: RFE: dnsbl-support for dovecot

2014-06-17 Thread Reindl Harald
Am 17.06.2014 20:23, schrieb Giles Coochey: On 17/06/2014 18:56, Reindl Harald wrote: Am 17.06.2014 19:43, schrieb Giles Coochey: On 17/06/2014 18:16, Reindl Harald wrote: after having my own dnsbl feeded by a honeypot and even mod_security supports it for webservers i think dovecot sould

Re: RFE: dnsbl-support for dovecot

2014-06-17 Thread Giles Coochey
On 17/06/2014 19:32, Reindl Harald wrote: Am 17.06.2014 20:23, schrieb Giles Coochey: On 17/06/2014 18:56, Reindl Harald wrote: Am 17.06.2014 19:43, schrieb Giles Coochey: On 17/06/2014 18:16, Reindl Harald wrote: Iptables has a log option please read again what you quoted iptables logs

Re: RFE: dnsbl-support for dovecot

2014-06-17 Thread Reindl Harald
Am 17.06.2014 20:39, schrieb Giles Coochey: On 17/06/2014 19:32, Reindl Harald wrote: Am 17.06.2014 20:23, schrieb Giles Coochey: On 17/06/2014 18:56, Reindl Harald wrote: Am 17.06.2014 19:43, schrieb Giles Coochey: On 17/06/2014 18:16, Reindl Harald wrote: Iptables has a log option

Re: RFE: dnsbl-support for dovecot

2014-06-17 Thread Jochen Bern
On -10.01.-28163 20:59, Reindl Harald wrote: i admit that i am not a C/C++-programmer, but i think doing the DNS request and in case it has a result block any login attemt should be not too complex Can't say that I actually ever *did* it, but according to the docs, the following should work:

Re: RFE: dnsbl-support for dovecot

2014-06-17 Thread Reindl Harald
Am 17.06.2014 21:04, schrieb Jochen Bern: On -10.01.-28163 20:59, Reindl Harald wrote: i admit that i am not a C/C++-programmer, but i think doing the DNS request and in case it has a result block any login attemt should be not too complex Can't say that I actually ever *did* it, but

Re: RFE: dnsbl-support for dovecot

2014-06-17 Thread Stephan Bosch
On 6/17/2014 7:16 PM, Reindl Harald wrote: after having my own dnsbl feeded by a honeypot and even mod_security supports it for webservers i think dovecot sould support the same to prevent dictionary attacks from known bad hosts, in our case that blacklist is 100% trustable and blocks before