[exim] Re: heads-up: some spam bots started RCPT flooding

Top Page
Delete this message
Reply to this message
Author: AC
Date:  
To: exim-users
Subject: [exim] Re: heads-up: some spam bots started RCPT flooding
On 2023-05-22 03:56, Markus Reschke via Exim-users wrote:
> Hi!
>
> On 2023-05-20 01:20, James via Exim-users wrote:
>> I use:
>>      condition = ${if and
>> {{>{$rcpt_count}{2}}{>{${eval:$rcpt_count-$recipients_count}}{2}}}{yes}{no}}
>
> Nice refinement!
>
>
> On Sun, 21 May 2023, Alexander Carver via Exim-users wrote:
>
>> Which of the ACLs should this actually be in? I tried (though I may
>> have made typos) each of check_mail, check_rcpt, and check_data but it
>> didn't trigger at all.
>
> Should be one of the first rules in check_rcpt to stop the RCPT
> flooding, as check_rcpt is run for each RCPT TO.
>
> ciao
>  Markus


Wonderful thanks, got it working (I did indeed have a typo)

Hopefully the sudden bot storm dies down soon. But at least with this
wonderful rule my log files aren't filling up quite so quickly.

--
## subscription configuration (requires account):
## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
## exim-users-unsubscribe@???
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/