Re: [exim] re spamming

On 22/11/2006 10:37, Deepak Kapoor wrote:
> that means if somebody is sending millions of email to a non exitant
> email id then there will be increase in overall bandwidth but no log

Not really: if someone is sending to a non-existant email id, exim will
refuse the email before the body part of the message is transferred, so
only a few hundred bytes of bandwidth will be used, and the log will
show that exim refused to accept an email.

> On 11/22/06, Ian FREISLICH <if@???> wrote:
[...]
>> No, for some reason exim doesn't log the size of rejected mails,

Because usually it can't, it hasn't received the email yet.

>> so for instance if a message is rejected after data by an ACL, there
>> will be no size logged in mainlog unless the administrator specifically
>> does something like:
>>
>> log_message = This message contains malware ($malware_name) S=$message_size for $recipients
>>
>> For cases where the rejection may involve significant bandwidth.

This would be rare and would depend on having a specialised
configuration which does reject after DATA and doesn't log *anything*
from the sound of what Deepak's saying.

Cheers,

John.