Re: [exim] drop connection on auth failure

Páxina inicial
Borrar esta mensaxe
Responder a esta mensaxe
Autor: Jeremy Harris
Data:  
Para: exim-users
Asunto: Re: [exim] drop connection on auth failure
On 15/07/2022 17:11, Julian Bradfield via Exim-users wrote:
> Not my experience. A large number of hosts try every hour or two -


My practice, and I think it would help with this sort of
attacker, is to delay the auth response for a fail.
By 15 or 20 seconds.  Most drop off by about ten, so
a) you've slowed them down and wasted their time
b) they never got an answer either way
c) it costs you very little (unless you're a far, far bigger
    site han any of mine)


--
Cheers,
Jeremy