<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=windows-1252" http-equiv=Content-Type><BASE
href="file://C:\Program Files\Common Files\Microsoft Shared\Stationery\">
<STYLE>BODY {
BACKGROUND-REPEAT: no-repeat; FONT-FAMILY: Arial; BACKGROUND-POSITION: left top; COLOR: #000000; FONT-SIZE: 10pt
}
</STYLE>
<META name=GENERATOR content="MSHTML 8.00.6001.19328"></HEAD>
<BODY bgColor=#ffffff>
<DIV>Our server is being sent loads of POP3 login requests. They're slow
(about 6s apart) and not really causing a problem, but I was under the
impression the server would block these once the volume go to above 60 failed
log in's within one hour.</DIV>
<DIV> </DIV>
<DIV>Nov 5 15:28:21 vps1 dovecot: pop3-login: Aborted login (auth failed,
1 attempts): user=<lexus>, method=PLAIN, rip=95.211.132.81,
lip=[xx.our.ip.xx]</DIV>
<DIV> </DIV>
<DIV>So, two questions...</DIV>
<DIV> </DIV>
<DIV>Is there anyway to tweak the configuration so these are blocked
automatically? The GUI says the IP is blocked, but new connections are
still appearing in the log.</DIV>
<DIV> </DIV>
<DIV>Alternatively, is there any way I can add the offending IP address to a
blacklist manually?</DIV>
<DIV> </DIV>
<DIV>Many thanks indeed.</DIV></BODY></HTML>