Zimbra Forums

If you use fail2ban and a password lockout policy, just set the fail2ban threshold lower than the lockout policy. In this way, a brute force attacker will get their IP blocked before the user's mailbox is set to Locked Out status; the legitimate user can keep using their email. You can do the same ...