Re: [exim] drop connection on auth failure

Αρχική Σελίδα
Delete this message
Reply to this message
Συντάκτης: Jeremy Harris
Ημερομηνία:  
Προς: exim-users
Αντικείμενο: Re: [exim] drop connection on auth failure
On 15/07/2022 17:11, Julian Bradfield via Exim-users wrote:
> Not my experience. A large number of hosts try every hour or two -


My practice, and I think it would help with this sort of
attacker, is to delay the auth response for a fail.
By 15 or 20 seconds.  Most drop off by about ten, so
a) you've slowed them down and wasted their time
b) they never got an answer either way
c) it costs you very little (unless you're a far, far bigger
    site han any of mine)


--
Cheers,
Jeremy