Re: [EXIM] logging illegal SMTP commands?

Top Page
Delete this message
Reply to this message
Author: Philip Hazel
Date:  
To: Marc Haber
CC: exim-users
Subject: Re: [EXIM] logging illegal SMTP commands?
On Sun, 9 May 1999, Marc Haber wrote:

> |riuztrieouhdgklj
> |500 Command unrecognized
> |debug
> |500 No way!


> None of these things resulted in a log entry. I am thinking that it
> might be useful to have exim log illegal commands on the SMTP channel.
> This could be useful in detecting somebody trying to to a buffer
> overflow or a similar attack. Would having such an option be useful in
> attack scenarios or would it open ways to attack a mail host itself?


Set log_smtp_syntax_errors.


-- 
Philip Hazel            University of Cambridge Computing Service,
ph10@???      Cambridge, England. Phone: +44 1223 334714.



--
*** Exim information can be found at http://www.exim.org/ ***