On 25/11/2018 10:32, Russell King via Exim-users wrote: > My mail server is being hit with auth attempts when the helo hasn't > advertised the presence of authentication
Spot them in the smtp-quit and -notquit ACLs, matching on the SMTP command sequence that's sitting around in some variable or other. I see both "EHLO, AUTH" and "EHLO, RSET, AUTH" so use a pattern. Then firewall their asses. -- Cheers, Jeremy -- ## List details at https://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
