[jira] [Commented] (JAMES-1724) JPAUsersRepository fails with exception when login via SMTP contains \0 symbol

2016-04-20 Thread Alexei Osipov (JIRA)
[ https://issues.apache.org/jira/browse/JAMES-1724?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15250778#comment-15250778 ] Alexei Osipov commented on JAMES-1724: -- Probably James should reject logins and passwords that

[jira] [Created] (JAMES-1724) JPAUsersRepository fails with exception when login via SMTP contains \0 symbol

2016-04-20 Thread Alexei Osipov (JIRA)
Alexei Osipov created JAMES-1724: Summary: JPAUsersRepository fails with exception when login via SMTP contains \0 symbol Key: JAMES-1724 URL: https://issues.apache.org/jira/browse/JAMES-1724

[jira] [Issue Comment Deleted] (JAMES-1723) Add protection from password bruteforcing

2016-04-20 Thread Alexei Osipov (JIRA)
[ https://issues.apache.org/jira/browse/JAMES-1723?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Alexei Osipov updated JAMES-1723: - Comment: was deleted (was: I use James 3.x (built from sources) and I can see IP of an attacker

[jira] [Commented] (JAMES-1723) Add protection from password bruteforcing

2016-04-20 Thread Alexei Osipov (JIRA)
[ https://issues.apache.org/jira/browse/JAMES-1723?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15249711#comment-15249711 ] Alexei Osipov commented on JAMES-1723: -- I use James 3.x (built from sources) and I can see IP of an

[jira] [Commented] (JAMES-1723) Add protection from password bruteforcing

2016-04-20 Thread Bernd Waibel (JIRA)
[ https://issues.apache.org/jira/browse/JAMES-1723?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15249361#comment-15249361 ] Bernd Waibel commented on JAMES-1723: - Currently (James 2.3.2) does not log the IP and user in the log

[jira] [Commented] (JAMES-1723) Add protection from password bruteforcing

2016-04-20 Thread Bernd Waibel (JIRA)
[ https://issues.apache.org/jira/browse/JAMES-1723?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15249364#comment-15249364 ] Bernd Waibel commented on JAMES-1723: - +1 for this ticket, we have a lot of these tried logins on our

[jira] [Commented] (JAMES-1723) Add protection from password bruteforcing

2016-04-20 Thread Bernd Waibel (JIRA)
[ https://issues.apache.org/jira/browse/JAMES-1723?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15249359#comment-15249359 ] Bernd Waibel commented on JAMES-1723: - Using Linux there is a paket "fail2ban" which is worth to look