Re: [exim] ratelimit based on invalid authentication

On Sun, Jul 8, 2012 at 6:55 PM, Dean Brooks <dean@???> wrote:
>
> I have included below the configuration we are using to do this. If
> you have this in place, your server will automatically begin rejecting
> hosts that send repeated auth failure attempts.
>
> You can change the BADAUTH_LIMIT macro below to any rate you like, but
> we use 15 failed attempts within 2 hours as our threshold.

Hmmm, your code is simple yet elegant. Very nice! I'd like to do
this same thing, but I need it to work across load balanced servers so
I need the data to be stored in a central location such as memcache.
I'll see if I can wrangle up some kinda way to do that.

...Todd
--
The total budget at all receivers for solving senders' problems is $0.
If you want them to accept your mail and manage it the way you want,
send it the way the spec says to. --John Levine