Re: [Exim] Dictionary Scans - HOWTO

Top Page
Delete this message
Reply to this message
Author: Nico Erfurth
Date:  
To: ODHIAMBO G. Washington
CC: exim-users
Subject: Re: [Exim] Dictionary Scans - HOWTO
ODHIAMBO G. Washington wrote:
> After a few days leave, everything has evaporated, so I seriously need
> some help. I have looked at the archives examples and used the following
> acl to try and keep away dictionary scans but it doesn't seem to work:
>
> drop   message     =  *** Dict scan!. Too many bad recipients, $rcpt_fail_count out of $rcpt_count
>            condition   = ${if > {${eval:$rcpt_fail_count}}{2}{yes}{no}}
>            delay       = ${eval: ($rcpt_fail_count + 1) * 1}m
>            log_message = Dictionary attack

>
>
> I've placed this right after the callout acl.
>
>
> All help welcome.


exim -d -bh 1.1.1.1

Nico