Re: [exim] drop connection on auth failure

Top Page
Delete this message
Reply to this message
Author: Jeremy Harris
Date:  
To: exim-users
Subject: Re: [exim] drop connection on auth failure
On 15/07/2022 17:11, Julian Bradfield via Exim-users wrote:
> Not my experience. A large number of hosts try every hour or two -


My practice, and I think it would help with this sort of
attacker, is to delay the auth response for a fail.
By 15 or 20 seconds.  Most drop off by about ten, so
a) you've slowed them down and wasted their time
b) they never got an answer either way
c) it costs you very little (unless you're a far, far bigger
    site han any of mine)


--
Cheers,
Jeremy