On Mon, 25 Jul 2005, Mark Smith wrote:
> From: Mark Smith <exim-users2@???>
> To: exim-users@???
> Date: Mon, 25 Jul 2005 16:57:03 +0100
> Subject: [exim] Spammer tactics
>
> This may not be new to others, but it's something I've only
> recently noticed.
>
> Zombie hosts are avoiding our per-host connection limits and
> dictionary attack checks by simply disconnecting as soon as they
> get a DENY, then immediately reconnecting and trying to send the
> same message again. They do this around ten times in a row before
> giving up.
>
> Anyone have any ideas how to combat this?
Have a look at the ratelimit stuff that Tony Finch put into
exim-4.52.
--
Dennis Davis, BUCS, University of Bath, Bath, BA2 7AY, UK
D.H.Davis@??? Phone: +44 1225 386101
