Re: [exim] Experimenting with SMTP auth...

Page principale
Supprimer ce message
Répondre à ce message
Auteur: Marco Gaiarin
Date:  
À: Jasen Betts
CC: exim-users
Sujet: Re: [exim] Experimenting with SMTP auth...
Mandi! Jasen Betts
In chel di` si favelave...

>> Ahem, because i'm using system account/password, so i've to protect myself
>> for dictionary attach.
> how does that protect ?


...preventing ''dictionary attach'', eg, preventing trying to login with
different login/pass combination.

Fail2ban track such login try, and if some more that a theresold happens,
bans (normally, '-j DROP' in iptables) the calling IP.


With ''normal'' exim feature can i prevent SMTP abuse, but if the user/pass
is the same for other services (ssh, a web app, ...) clearly this is not
sufficient.

-- 
  Il problema è che, in questa epoca di grande comunicazione globale,
  quando ti fa male il culo non è per le emorroidi...    (Beppe Grillo)