Re: [Exim] smtp auth and brute force attacks

Top Page
This message is part of the following thread:
M-+\the complete thread tree sorted by date
M\MMTamas TEVESZ at <-
MMDave C. at ->
Delete this message
Reply to this message
Author: Suresh Ramasubramanian
Date:  
To: exim-users
Subject: Re: [Exim] smtp auth and brute force attacks
On Thursday, October 03, 2002 8:37 PM,
Philip Hazel <ph10@???> wrote:

> Or maybe always return FAIL after 5 tries?

that'll not stop DOS ... and I've seen broken MUAs (for example older
mozilla versions) try to AUTH repeatedly (several times a minute) if AUTH
fails for some reason. 

    -suresh




This message was posted to the following mailing lists:
Exim-users
Mailing List Info | Nearby Messages		<-RE: [Exim] Exim 3.36 using ldap in router conditionRe: [Exim] Wish list (I think) regarding sender verify callout.->
Tahini and Hummus and Cumin Development Archives administrated by cumin AdminsLurker (version 2.3)