Re: [exim] Auth command used when not advertised

Top Page
Delete this message
Reply to this message
Author: Jeremy Harris
Date:  
To: exim-users
Subject: Re: [exim] Auth command used when not advertised
On 25/11/2018 10:32, Russell King via Exim-users wrote:
> My mail server is being hit with auth attempts when the helo hasn't
> advertised the presence of authentication


Spot them in the smtp-quit and -notquit ACLs, matching on the SMTP
command sequence that's sitting around in some variable or other.
I see both "EHLO, AUTH" and "EHLO, RSET, AUTH" so use a pattern.

Then firewall their asses.
--
Cheers,
Jeremy