On 02/06/2023 10:41, James via Exim-users wrote:
> On 01/06/2023 21:37, Julian Bradfield via Exim-users wrote:
>> In response to the recent RCPT-flooding attacks, I changed my
>> acl_check_rcpt verification check to say:
>> deny
>> domains = +local_domains
>> !local_parts = postmaster
>> !verify = recipient
>> message = Unknown user
>> delay = 5s
>> However, in the exim log file I'm still seeing 99 denied RCPT commands
>> all with the same timestamp.
>>
>> How can this be?
>
> acl_check_rcpt's deny applies to the RCPT not the connection. This is like if there is one non-existent recipient in a batch then only that is denied and the rest are delivered. In your case it tests 99 and denies 99.
That's missing his point; he's not seeing a delay between log lines
for the denials.
--
Cheers,
Jeremy
--
## subscription configuration (requires account):
##
https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
## exim-users-unsubscribe@???
## Exim details at
http://www.exim.org/
## Please use the Wiki with this list -
http://wiki.exim.org/
