Author: Heiko Schlittermann Date: To: exim-users Subject: Re: [exim] Feature Request: react on HTTP
Cyborg via Exim-users <exim-users@???> (Do 06 Mai 2021 11:43:58 CEST): >
> 2021-05-06 11:07:58 no host name found for IP address 68.183.80.168
> 2021-05-06 11:07:58 SMTP call from [68.183.80.168] dropped: too many
> unrecognized commands (last was "Accept-Encoding: gzip, deflate") … > I suggest:
>
> not to wait for the usual error treshhold of smtp related errors, but
> instead auto disconnect and block the IP for a few minutes , because, as
> seen, they come back as often as you let them.
Shouldn't the enforcement of syncronisation already prevent this? Hm,
maybe we've a mid-air collision of our banner and their HTTP request.
Don't we have a max_invalid_smtp_commands threshould?
