Re: [exim] Ratelimit Tricks

Jeremy Harris wrote:
> Marc Perkel wrote:
>
>> OK - we touched on this earlier but want to see if I can actually make
>> it work. What I want to do is use ratelimit to limit IP addresses so
>> that if I get several invalid users (dictionary attack) that the IP
>> address of the attacker get a defer until some time passes. I'm thinking
>> that one bad recitient gets you defered for 10 minutes.
>>
>
> On an invalid user, write the IP to a file. Rotate files from cron
> every five minutes. In your connect acl lookup the IP in the two most
> recent files.
>
>

Actually I've used that trick before.