Re: [exim] protecting privileged users from SMTP-AUTH attack…

Kezdőlap
Üzenet törlése
Válasz az üzenetre
Szerző: Graeme Fowler
Dátum:  
Címzett: exim users
Tárgy: Re: [exim] protecting privileged users from SMTP-AUTH attacks
On 2 Dec 2019, at 13:40, Cyborg via Exim-users <exim-users@???> wrote:
> So, the answere is "no, there is no way to intercept here." Is ok, take
> it as a FeatureRequest ;)


Jeremy’s answer was quite clear: use a DB backend such as a ratelimit DB.

I’ve been doing that for years - more than N failed auths in X time gets you in the connect blacklist. Bye bye.

How you do/track this is up to you, but the tools already exist.

Graeme