Re: [exim] DDOS on SMTP port by large number of new connecti…

Pàgina inicial
Delete this message
Reply to this message
Autor: Xander D Harkness
Data:  
A: Anoop John
CC: exim-users
Assumpte: Re: [exim] DDOS on SMTP port by large number of new connections from random IPs
Dear Anoop,

On 18 Oct 2014, at 10:48, Anoop John <anoopjohn@???> wrote:
>
>
> Is there some setting in exim that can drop connections if there is no
> authentication within a timeout or something like that?


You might also try to limit the number of connections per server, which I find works very well. I find I do not need a high connection limit as most servers will try pipelining.

Something like:

smtp_accept_max_per_host       = ${if \
                                    match_ip\
                                       {$sender_host_address}\
                                       {+priority_hosts}\
                                    {0}\
                                    {4}\
                                  }


Kind regards
Xander