Re: [exim] Ratelimit Spam

Top Page
Delete this message
Reply to this message
Author: Phil Pennock
Date:  
To: Matt
CC: exim-users
Subject: Re: [exim] Ratelimit Spam
On 2007-12-24 at 10:30 -0600, Matt wrote:
> # Slow down fast senders; note the need to truncate $sender_rate
> # at the decimal point.
> warn ratelimit = 200 / 1h / per_rcpt / strict
>         delay = ${eval: ${sg{$sender_rate}{[.].*}{}} - $sender_rate_limit }s
>         log_message = Sender rate $sender_rate / $sender_rate_period
> excedes limit delayed \
>                 ${eval: ${sg{$sender_rate}{[.].*}{}} -
> $sender_rate_limit } seconds

>
>
> Is there a way to get it to add the source and destination email
> address to the log entry? When it triggers on webmail users it just
> lists 127.0.0.1 and I have no idea who it was.


There are a large number of variables available within Exim for use in
expanded strings. You have this on a RCPT ACL, so that there's just one
explicit recipient under consideration at the time, yes?

See section "11.9 Expansion variables" of The Spec.

$sender_address
$local_part@$domain

-Phil