Re: [Exim] dictionary attack

Páxina inicial
Borrar esta mensaxe
Responder a esta mensaxe
Autor: George Szekely
Data:  
Para: exim-users
Asunto: Re: [Exim] dictionary attack
>
>How about this?
>
>deny message   = Recipient unknown
>      !verify   = recipient
>      delay     = ${eval: ($rcpt_fail_count + 1) * 1}m

>
>Nico


Thanks Nico, this one works fine, but after all, I'm not sure if it's
a strong enough deterrent. Deny will return a standard "550 unknown"
with a 1 minute delay and it probably goes to a forged and/or
nonexistent return address as well. DROP in ACL will leave it in
their queue for future retry.

George