LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Server (https://www.linuxquestions.org/questions/linux-server-73/)
-   -   limiting POP3/IMAP access frequency (https://www.linuxquestions.org/questions/linux-server-73/limiting-pop3-imap-access-frequency-834154/)

anctop 09-24-2010 12:06 AM

limiting POP3/IMAP access frequency
 
Hi,

My server listens to POP3/IMAP requests. Some users have configured their mailers with high checking frequencies, say once every minute, such that the system logs are full of entries with no significance at all.

I'd like to ask if there is a way to limit the per IP frequency of POP3/IMAP access ?

I'm using "xinetd" to wrap the "ipop3d" and "imapd" which come with the Alpine package.


Best regards,
anctop

unSpawn 10-11-2010 03:19 PM

Quote:

Originally Posted by anctop (Post 4107337)
My server listens to POP3/IMAP requests. Some users have configured their mailers with high checking frequencies, say once every minute, such that the system logs are full of entries with no significance at all. I'd like to ask if there is a way to limit the per IP frequency of POP3/IMAP access ? I'm using "xinetd" to wrap the "ipop3d" and "imapd" which come with the Alpine package.

See "per_source" in 'man xinetd.conf' or iptables "limit" module 'iptables --help -m limit'?

anctop 10-12-2010 01:57 AM

Thanks for the information, but they do not help for my case.

The "per_source" of xinetd, or the "connlimit" of iptables, only limits the number of concurrent connections. This has already been implemented, but I'm looking for a way to limit the hit frequency of each client.

The "limit" of iptables seems to limit the overall rate, not counting per IP. My system serves quite many users. Most of the clients are properly configured except for a few ones, therefore I don't want to implement a global rate limit which may also affect those well-behaved users.

unSpawn 10-12-2010 03:11 PM

Quote:

Originally Posted by anctop (Post 4124633)
The "limit" of iptables seems to limit the overall rate, not counting per IP.

I meant to write "recent", not "limit".

anctop 10-12-2010 07:01 PM

I think this is what I'm looking for.
Thank you very much.


All times are GMT -5. The time now is 05:24 AM.