Stronger exim rules

[jenkan04]

Hello,

We have setup a couple of new servers and right away we see alot of incidents of Exim Auth failed.
Most of these come from Iran/India/Irak etc.

Why are these not graylisted or blacklisted? There should be an easy way to mark all of these and blacklist them.

What file should we do modifications so the are blacklisted/graylisted after a smaller intervals?

[skhristich]

Hello Morten,
Of course, you can make edits according to the relevant rules, but they will be applied globally, without taking into account the country of the attacker. Therefore, in this case amendments to the rules are not recommended. The next version of Imunify360 is expected to support mail blocking using the PAM module, it will have to provide more precise blocking without compromising legitimate users.
Please let us know if you have any questions. Thanks in advance!

[morten]

Ok, great to hear that.
Is that experimental now like shown in screenshot and will be put into production release in next version?

[skhristich]

Hello Morten, It will also go to production with version 4.5. as experimental until we completely supplement it with ftp support. We have not decided yet when it will be turned on by default. Follow our news If you have any other questions, feel free to ask here. Thank you for contacting us.