Re: [Exim] Basic teergrubing with Exim 4.11

Top Page
Delete this message
Reply to this message
Author: Tabor J. Wells
Date:  
To: Kevin P. Fleming
CC: Exim-users
Subject: Re: [Exim] Basic teergrubing with Exim 4.11
On Thu, Dec 12, 2002 at 04:37:52PM -0700,
Kevin P. Fleming <kpfleming@???> is thought to have said:

> True... I've only seen a few (less than six) dictionary attacks so far, but
> that's a good idea (and easy enough to implement).


You're luckier than I am. I get them fairly regularly.

> deny   domains = +local_domains
>        message = unknown user
>        delay = ${if >{$rcpt_fail_count}{1}
>        {${eval:30*$rcpt_fail_count}}{0}}s
>        ! verify = recipient

>
> Or something like that... I've yet to try it.


Don't forget log_message so you can easily identify the hosts you're
teergrubing and possibly drop them in a firewall rule.

--
--------------------------------------------------------------------
Tabor J. Wells                                     twells@???
Fsck It!                 Just another victim of the ambient morality