[exim] Re: Tackling Bot Blasts

Top Page
Delete this message
Reply to this message
Author: Pete Long
Date:  
To: Odhiambo Washington
CC: exim-users
Subject: [exim] Re: Tackling Bot Blasts
On 2023-05-29 18:36:18, Odhiambo Washington wrote:
> On Mon, May 29, 2023 at 4:23 PM Pete Long via Exim-users <
> exim-users@???> wrote:
>
> > acl_check_rcpt:
> >
> > drop
> >    message = No host name found.
> >    condition = ${if eq{$host_lookup_failed} {1} {1}{0}}

> >
>
> How about if you did the above in acl_check_connect instead of
> acl_check_rcpt??
>
> And only the below in acl_check_rcpt ?
>
> drop message = Too many bad recipients.
> > condition = ${if and
> > {{>{$rcpt_count}{2}}{>{${eval:$rcpt_count-$recipients_count}}{2}}}{yes}{no}}
> >
>
> Maybe you'd save some CPU cycles?


Hmm. I didn't consider expense, so that's a good point.

Below is my only acl_smtp_connect ACL.


[...]


acl_smtp_connect = acl_hosts_control


[...]


begin acl


acl_hosts_control:
    accept !hosts = /etc/exim4/host_reject
    endpass




Pete.

--
## subscription configuration (requires account):
## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
## exim-users-unsubscribe@???
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/