cqrenet/relay
4
0
Fork 0
mirror of https://github.com/chatmail/relay.git synced 2026-05-20 12:58:04 +00:00
Code Issues Packages Projects Releases Wiki Activity

dovecot: disable anvil authentication penalty

Browse Source 
fix #441
This commit is contained in:
missytake
2024-10-30 15:31:25 +01:00
parent 3098afb342
commit a5fd5cfb55
2 changed files with 12 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
CHANGELOG.md
View File

@@ -9,6 +9,9 @@
- add guide to migrate chatmail to a new server - add guide to migrate chatmail to a new server
([#429](https://github.com/deltachat/chatmail/pull/429)) ([#429](https://github.com/deltachat/chatmail/pull/429))
- disable anvil authentication penalty
([#414](https://github.com/deltachat/chatmail/pull/444)
- increase `request_queue_size` for UNIX sockets to 1000. - increase `request_queue_size` for UNIX sockets to 1000.
([#437](https://github.com/deltachat/chatmail/pull/437)) ([#437](https://github.com/deltachat/chatmail/pull/437))

9
cmdeploy/src/cmdeploy/dovecot/dovecot.conf.j2
View File

@@ -194,6 +194,15 @@ service imap-login {
process_min_avail = 10 process_min_avail = 10
} }
service anvil {
# We are disabling anvil penalty on failed login attempts
# because it can only detect brute forcing by IP address
# not by username. As the correct IP address is not handed
# to dovecot anyway, it is more of hindrance than of use.
# See <https://www.dovecot.org/list/dovecot/2012-May/135485.html> for details.
unix_listener anvil-auth-penalty { mode = 0 }
}
ssl = required ssl = required
ssl_cert = </var/lib/acme/live/{{ config.mail_domain }}/fullchain ssl_cert = </var/lib/acme/live/{{ config.mail_domain }}/fullchain
ssl_key = </var/lib/acme/live/{{ config.mail_domain }}/privkey ssl_key = </var/lib/acme/live/{{ config.mail_domain }}/privkey