Re: [Exim] dictionary attack

Top Page
Delete this message
Reply to this message
Author: George Szekely
Date:  
To: exim-users
Subject: Re: [Exim] dictionary attack
>
>How about this?
>
>deny message   = Recipient unknown
>      !verify   = recipient
>      delay     = ${eval: ($rcpt_fail_count + 1) * 1}m

>
>Nico


Thanks Nico, this one works fine, but after all, I'm not sure if it's
a strong enough deterrent. Deny will return a standard "550 unknown"
with a 1 minute delay and it probably goes to a forged and/or
nonexistent return address as well. DROP in ACL will leave it in
their queue for future retry.

George