Re: [Exim] dictionary attack

Page principale
Supprimer ce message
Répondre à ce message
Auteur: George Szekely
Date:  
À: exim-users
Sujet: Re: [Exim] dictionary attack
>
>How about this?
>
>deny message   = Recipient unknown
>      !verify   = recipient
>      delay     = ${eval: ($rcpt_fail_count + 1) * 1}m

>
>Nico


Thanks Nico, this one works fine, but after all, I'm not sure if it's
a strong enough deterrent. Deny will return a standard "550 unknown"
with a 1 minute delay and it probably goes to a forged and/or
nonexistent return address as well. DROP in ACL will leave it in
their queue for future retry.

George