Re: [exim] Auth command used when not advertised

Top Page
This message is part of the following thread:
M++\the complete thread tree sorted by date
MMMMNigel Metheringham at <-
MMRichard Jones at ->
Delete this message
Reply to this message
Author: Jeremy Harris
Date:  
To: exim-users
Subject: Re: [exim] Auth command used when not advertised
On 25/11/2018 10:32, Russell King via Exim-users wrote:
> My mail server is being hit with auth attempts when the helo hasn't
> advertised the presence of authentication

Spot them in the smtp-quit and -notquit ACLs, matching on the SMTP
command sequence that's sitting around in some variable or other.
I see both "EHLO, AUTH" and "EHLO, RSET, AUTH" so use a pattern.

Then firewall their asses.
--
Cheers,
Jeremy

This message was posted to the following mailing lists:
Exim-users
Mailing List Info | Nearby Messages		<-Re: [exim] Auth command used when not advertisedRe: [exim] Auth command used when not advertised->
Tahini and Hummus and Cumin Development Archives administrated by cumin AdminsLurker (version 2.3)