On 24.2.2012, at 0.33, Wilberth Perez wrote: > Does any one , knows if is possible configure dovecot for limit max > number of connections for IP address? > > I would like to prevent future fork-bombing attacks for pop3 and imap > login process in my email server. > > Our dovecot version is : 1.2.10
There is mail_max_userip_connections setting which limits IP+username combination. Typically that should be enough to prevent fork bombing, because users normally don't have more than one account. Or you mean when some IP keeps connecting even without actually loggin in? http://wiki.dovecot.org/LoginProcess has some settings related to this, which should normally be quite helpful if the limits are right.
