On Thu, Dec 08, 2022 at 12:22:13PM -0700, The Doctor via Exim-users wrote:
> On Thu, Dec 08, 2022 at 09:24:19PM +0300, Odhiambo Washington via Exim-users wrote:
[...]
> > >>> host in "5.34.207.0/24"? yes (matched "5.34.207.0/24")
> > >>> host in host_reject_connection? yes (matched "+host_rejects")
> > LOG: refused connection from [5.34.207.3] (host_reject_connection)
> > 554 SMTP service not available
> > root@gw:/usr/home/wash #
>
> Still seeing
>
> netstat -a | egrep smtp
> tcp4 0 0 exploreedmonton..smtps 5.34.207.189.26526 SYN_RCVD
> tcp4 0 0 comparealbertapo.smtps 5.34.207.190.30872 FIN_WAIT_2
> tcp4 0 0 204.209.81.148.smtps 5.34.207.114.57546 FIN_WAIT_2
Rejection with status code 554 requires established TCP connection.
Study mainlog to check whether connections are rejected.
However, absense of numerous connections in ESTABLISHED state is a hint
that rejection works.
If you don't want TCP connections, use packet filtering on kernel level
instead of Exim's configuration options.
--
Eugene Berdnikov
