Author: Darren Casey Date: To: exim-users Subject: Re: [Exim] rejecting based on HELO
> > Could you share how you get Exim to cause an IP to be added to your
iptables > > blacklist? I imagine it's really obvious (to someone who has already done > > it). ;) I am guessing you trigger an external script that adds the offending > > IP to iptables rule? Details (example?) would be appreciated, if possible. >
> It's quite simple really.
>
> tail /var/log/exim/maillog
>
> if see the same IP address listed several times login to firewall and add
> offending IP to list.
>
> It's a manual process. I don't have enough of attempts to code doing it
> automatically (especially since the firewall is on another machine)
You could also look at metalog as a replacement for syslogd. It will watch
for regular expressions and call external scripts etc..
