Re: [exim] PLAIN authenticator that checks against two data …

Page principale
Supprimer ce message
Répondre à ce message
Auteur: Lena
Date:  
À: exim-users
Sujet: Re: [exim] PLAIN authenticator that checks against two data sources
> From: Mike Brudenell

> I think I'll quit worrying, leave the setup
> as-is with a deferral response to the AUTH, and move on.
>
> This all came about because I was starting to look at rate limiting failed
> attempts to AUTH along these lines
> <https://lists.exim.org/lurker/message/20120709.015548.eb9d2ba2.en.html>.
> (Although I have my suspicions as to whether it will work as the author of
> that post says after a failed authentication attempt Exim will go straight
> to the check_quit or check_not_quit ACLs, whereas I see it happily letting
> the client try to authenticate again down the same connection. I'll keep
> playing.


This catches multiple auth attempts in the same connection too:
https://github.com/Exim/exim/wiki/BlockCracking