Re: Protection against POP or IMAP Denial of Service (DOS)

2008-05-21 Thread Bron Gondwana
On Wed, 21 May 2008 07:13:10 +0200, "Christiaan den Besten" <[EMAIL PROTECTED]> said: > Bron, > > What does the authentication for nginx for you, since it can't query > for example a ldap directly ( at least, not the last time I checked )? > The epoll will scale, but wondering what is the mo

Re: Protection against POP or IMAP Denial of Service (DOS)

2008-05-20 Thread Bron Gondwana
On Wed, May 21, 2008 at 12:32:33AM +0200, Stéphane BERTHELOT wrote: > But being recently attacked many times especially on POP3 service I am > looking for some advice or maybe making a feature request for some more > protection against DOS. Gosh, I seem to be spending a lot of time pimping nginx

Re: Protection against POP or IMAP Denial of Service (DOS)

2008-05-20 Thread Jorey Bump
Stéphane BERTHELOT wrote, at 05/20/2008 06:32 PM: > - increase security level (SSL/ CRAM-MD5/ ...). In a wonderful world it > would be possible but I would bet (but I've not checked yet) that some > of our users have pretty broken clients (like old Outl**k...) that would > not be able to login

Protection against POP or IMAP Denial of Service (DOS)

2008-05-20 Thread Stéphane BERTHELOT
Hello everyone, We are using Cyrus IMAP and POP daemons on many servers for quite some time (3+ years) and we're very satisfied with it for now. But being recently attacked many times especially on POP3 service I am looking for some advice or maybe making a feature request for some more protec