Re: [Exim] exim : inbound attack , please help.

Pàgina inicial
Delete this message
Reply to this message
Autor: Drav Sloan
Data:  
A: Ravi kumar
CC: exim-users
Assumpte: Re: [Exim] exim : inbound attack , please help.
Ravi kumar wrote:
> HI,
>
> iam hosting multiple domains ( virtual hosting ) .
> iam getting lot of incomming spam mails to perticular domain abc.com
> sending lot of zunk mails to random(non existing ) mail address of abc.com
>
> example: 123@??? , sdfs@??? , asdasd@???
>
> server load reached 100 so i removed that domain and even also deleted zone
> for that domain but still iam getting spam mails
> How to stop them , even there is no MX record - how one can send mails to
> exim .


In your rpct_acl:

  # too many bad recipients in one transaction
  drop  message   = Too many bad recipients ${eval:$rcpt_fail_count} \
                    out of $rcpt_count
        condition = ${if > {${eval:$rcpt_fail_count}}{2}{yes}{no}}


Will drop the connection from the remote host if it does RCPT TO:'s to
3 failed recipients.

Is that what you are after?

Regards

D.