RE: [Exim] Dictionary attack defence ideas?

Top Page
Delete this message
Reply to this message
Author: David Markham
Date:  
To: exim-users, 'Juha Saarinen'
Subject: RE: [Exim] Dictionary attack defence ideas?
Is this only an exim4 thing or will it work on exim 3 ?

I have have people mailing through our outbound servers allowed due to dial
up ips allowed to relay, but when they decide to spam or send to loads of
different recipients, its harder to find now as they keep changing their
from address and sending small numbers at a time of say 50-60.

They must be coming from the same host though, so will
smtp_accept_max_per_host or smtp_ratelimit_xxx help?

cheers

-----Original Message-----
From: exim-users-admin@??? [mailto:exim-users-admin@exim.org]On
Behalf Of Philip Hazel
Sent: 08 July 2002 09:40
To: Juha Saarinen
Cc: exim-users@???
Subject: Re: [Exim] Dictionary attack defence ideas?


On Mon, 8 Jul 2002, Juha Saarinen wrote:

> Is there a way to e.g. teergrube idiots who bombard your server with lots
> of connections? Max_connections_per_host or something?


smtp_accept_max_per_host

See also smtp_ratelimit_xxx for slowing down multiple commands on a
single connection.

--
Philip Hazel            University of Cambridge Computing Service,
ph10@???      Cambridge, England. Phone: +44 1223 334714.



--

## List details at http://www.exim.org/mailman/listinfo/exim-users Exim
details at http://www.exim.org/ ##