Stephan Lauffer skrev den 2013-02-05 14:20:
...as you said: per IP.
stop using ip alone auth
If the IP is that of your webmailer... one user causes the whole side to be throtteled... (not that funny unless every user has its own roundcube)
best option is the old policyd with sasl auth rate limit, it does not care of ips at all
You need some more magic software (plugged to postfix or to roundcube) for this. Postfix can't help you out (for Squirrelmail there are such addons).
squirrelmail is nice too, but its not a good rate limiter for users with cellphones
http://www.policyd.org/ use v1, only use v2 if you have amavisd aswell