[...]

Cette notice a iti ajoutie par le systhme d'analyse "SpamAssassin" sur
votre serveur de courrier "colibri", pour vous
aider ` identifier ce type de messages.

Le systhme SpamAssassin ajoute un en-tjte "X-Spam-Flag: YES" aux
messages qu'il considhre comme itant probablement du Spam.
Vous pouvez si vous le souhaitez utiliser cette caractiristique
pour rigler un filtre dans votre logiciel de lecture de courrier,
afin de ditruire ou de classer ` part ce type de message.

Si ce robot a classifii incorrectement un message qui vous itait
destini, ou pour toute question, veuillez contacter l'administrateur
du systhme par e-mail ` @@CONTACT_ADDRESS@@ .

Voir http://spamassassin.apache.org/tag/ pour plus de ditails (en anglais).

 Ditails de l'analyse du message:   (-1.0 points, 3.0 requis)
 -1.0 ALL_TRUSTED            Passed through trusted hosts only via SMTP

 -------------------- Fin de Rapport SpamAssassin ---------------------
X-Spam-Score: -1.8 (-)
X-Spam-Status: No, score?.8 required~0 tests?L.750, BAYES_00?.5,
    EXIM_EXP_VAR? autolearn?m version^1.8
Cc: exim-users@???
Subject: Re: [exim] How to send notification mail when auth fails
X-BeenThere: exim-users@???
X-Mailman-Version: 2.1.14
Precedence: list
List-Id: A user list for the exim MTA <exim-users.exim.org>
List-Unsubscribe: <https://lists.exim.org/mailman/options/exim-users>,
    <mailto:exim-users-request@exim.org?subject?subscribe>
List-Archive: <https://lists.exim.org/lurker/list/exim-users.html>
List-Post: <mailto:exim-users@exim.org>
List-Help: <mailto:exim-users-request@exim.org?subject?lp>
List-Subscribe: <https://lists.exim.org/mailman/listinfo/exim-users>,
    <mailto:exim-users-request@exim.org?subject?bscribe>
X-List-Received-Date: Thu, 01 Jan 2015 20:24:26 -0000

Wonderful!
That was exactly what I was looking for

The part :
continue = ${run{SHELL -c "echo $sender_host_address \
           >>$spool_directory/blocked_IPs; \
           \N{\N echo Subject: $sender_host_address blocked; echo; echo \
           for bruteforce auth cracking attempt.; \
           \N}\N | $exim_path -f root WARNTO »}}
does the trick.
I’ve just removed the echo command to avoid having identical lines in my files.

Thanks a lot

regards

nb


> Le 1 janv. 2015 à 20:01, Jeremy Harris <jgh@???> a écrit :
>
> On 01/01/15 13:14, nb wrote:
>> I would like to know if there’s a way to notify me by mail, when an authentication failed.
>> Some connections try different logins and I would like to put the corresponding ip addresses in a local file to forbid connections from them (acl_smtp_connect)
>
> Lena's work is in that direction, I think:
>
> https://github.com/Exim/exim/wiki/BlockCracking
> --
> Cheers,
> Jeremy
>
>
> --
> ## List details at https://lists.exim.org/mailman/listinfo/exim-users
> ## Exim details at http://www.exim.org/
> ## Please use the Wiki with this list - http://wiki.exim.org/