Re: [Exim] (no subject)

Pàgina inicial
Delete this message
Reply to this message
Autor: Dave C.
Data:  
A: Nico Erfurth
CC: Adam Moffett, exim-users@exim.org
Assumptes nous: dictionary attacks, was Re: [Exim] (no subject)
Assumpte: Re: [Exim] (no subject)
On Sun, 6 Oct 2002, Nico Erfurth wrote:

> > On Sat, 5 Oct 2002, Adam Moffett wrote:
> >
> > Yes, but in exim4, I can only reject at the RCPT TO, and the connections
> > sit there wading thru hundreds of RCPT TO's each - I'd like to find way
> > to just DROP the connection with a short delay and a 5xx once it says
> > "HELO whatever.optprofessionals.com"
>
> You can't drop the connection, but you can stall him.


the ratelimitijng does that fine.. The problem is that there are
hundreds of these connections at once, and if they are all stalling they
are using up resources and process slots...

>
> deny condition = ${if match
>            {$sender_helo_name}{\N\.optprofessionals\.com$\N}
>            {${run{/bin/sleep 30}{1}{1}}{0}
>          }

>
>
> ciao
>
>