Re: [Dovecot] dovecot penalties and anvil

2011-12-20 Thread Timo Sirainen
On Tue, 2011-12-13 at 09:39 -0200, Leonardo Rodrigues wrote:

  I'm strugling to find some documentation on dovecot's anvil service 
 and/or its penalties (that can be checked with doveadm penalty) ... but 
 i'm not finding anything on that.
 
  is there any documentation on anvil/penalties that i should check 
 other than a few messages on the mailing list archive ?

Nope. Basically:

 * Each failed attempt doubles the penalty for next login attempt from
that specific IP
 * Penalty is maxed out at 30 seconds
 * Each successful login (after waiting for penalty) will clear the
penalty for that IP
 * You can disable the penalty entirely with: service anvil
{ unix_listener anvil-auth-penalty { mode = 0 } }

I don't really like this penalty stuff. Maybe it's better than nothing,
maybe not. Maybe there's a better way to do it. Not very useful for
IPv6.



[Dovecot] dovecot penalties and anvil

2011-12-13 Thread Leonardo Rodrigues


Hi,

I'm strugling to find some documentation on dovecot's anvil service 
and/or its penalties (that can be checked with doveadm penalty) ... but 
i'm not finding anything on that.


is there any documentation on anvil/penalties that i should check 
other than a few messages on the mailing list archive ?


thanks !

--


Atenciosamente / Sincerily,
Leonardo Rodrigues
Solutti Tecnologia
http://www.solutti.com.br

Minha armadilha de SPAM, NÃO mandem email
gertru...@solutti.com.br
My SPAMTRAP, do not email it