[exim] Re: Excessive "bad recipient" messages in syslog

Pàgina inicial
Delete this message
Reply to this message
Autor: Jeremy Harris
Data:  
A: exim-users
Assumpte: [exim] Re: Excessive "bad recipient" messages in syslog
On 28/05/2023 22:09, Jim Fenton via Exim-users wrote:
> Has anyone devised a way to cut down on the number of messages without eliminating them entirely?


Assuming you're using a "deny" verb in the RCPT ACL for this
condition, if the spammer merrily carries on with a further
bad recipient for this same message you'll be getting yet
another such log line...

You could consider a "drop" verb. And then worry if they'll
just try connecting again (at which point you look into
"seen" or "ratelimit" actions).

Or you could consider an escalating delay, every time you
detect the condition.
--
Cheers,
Jeremy


--
## subscription configuration (requires account):
## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
## exim-users-unsubscribe@???
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/