Re: [exim] Block access to certain IPs

2012-11-23 Thread Richard Lithvall
On Thu, Nov 22, 2012 at 08:07:12AM -0300, Jorge wrote: Daily I found in rejectlog file hundreds of lines like: 2012-mm-dd hh: mm: ss fixed_login authenticator failed for ([www.xxx.yyy.zzz]) [ww.xx.yyy.zz]: 535 Incorrect authentication data (set_id = xyz) And in most of them the

Re: [exim] Block access to certain IPs

2012-11-23 Thread Nigel Metheringham
Maybe its worth looking at fail2ban to manage either the firewall or a block list that exim can use (I would prefer the latter since it then means that there is some log data that can be used at the point where your most important customer asks why you are blocking their mail). Remember that all

Re: [exim] Block access to certain IPs

2012-11-23 Thread Bernard Hurley
On Fri, Nov 23, 2012 at 10:42:18AM +0100, Cyborg wrote: Am 23.11.2012 08:48, schrieb Bernard Hurley: You can also block a range of IP's with code like: iptables -A INPUT -s XX.XX.XX.0/16 -p tcp --dport 25 -j REJECT Just a hint, if you firewall a connection, just block the SYN flagged

[exim] exim_tidydb doesn't make databases smaller

2012-11-23 Thread Arkadiusz Miśkiewicz
Hi. Shouldn't exim_tidydb make databases physically smaller? # ls -al /var/spool/exim/db/callout -rw-r- 1 exim exim 677601280 11-23 13:25 /var/spool/exim/db/callout # exim_tidydb -t 2d /var/spool/exim/ callout /dev/null # ls -al /var/spool/exim/db/callout -rw-r- 1 exim exim 677601280

Re: [exim] Configuring rate limiting on a per router basis

2012-11-23 Thread Lena
From: Cameron Harris Would $sender_address_data be able to contain data about message headers? You can specify in address_data (in router[s]) anything you want. Sorry, not $sender_address_data but $address_data in your case. in acl_check_rcpt after verify = recipient you can use

Re: [exim] Block access to certain IPs

2012-11-23 Thread Lena
From: Jorge Daily I found in rejectlog file hundreds of lines like: 2012-mm-dd hh: mm: ss fixed_login authenticator failed for ([www.xxx.yyy.zzz]) [ww.xx.yyy.zz]: 535 Incorrect authentication data (set_id = xyz) And in most of them the IP is the same. How I can prevents access to

Re: [exim] exim_tidydb doesn't make databases smaller

2012-11-23 Thread Warren Baker
On Fri, Nov 23, 2012 at 2:32 PM, Arkadiusz Miśkiewicz ar...@maven.pl wrote: Hi. Shouldn't exim_tidydb make databases physically smaller? Have a look at http://www.exim.org/exim-html-current/doc/html/spec_html/ch52.html#SECID262 -- .warren -- ## List details at

Re: [exim] exim_tidydb doesn't make databases smaller

2012-11-23 Thread Marcin Mirosław
W dniu 23.11.2012 13:32, Arkadiusz Miśkiewicz pisze: Hi. Shouldn't exim_tidydb make databases physically smaller? # ls -al /var/spool/exim/db/callout -rw-r- 1 exim exim 677601280 11-23 13:25 /var/spool/exim/db/callout # exim_tidydb -t 2d /var/spool/exim/ callout /dev/null # ls -al

Re: [exim] exim_tidydb doesn't make databases smaller

2012-11-23 Thread Arkadiusz Miśkiewicz
On Friday 23 of November 2012, Warren Baker wrote: On Fri, Nov 23, 2012 at 2:32 PM, Arkadiusz Miśkiewicz ar...@maven.pl wrote: Hi. Shouldn't exim_tidydb make databases physically smaller? Have a look at http://www.exim.org/exim-html-current/doc/html/spec_html/ch52.html#SECID26 2

Re: [exim] exim_tidydb doesn't make databases smaller

2012-11-23 Thread Graeme Fowler
On Fri, 2012-11-23 at 13:32 +0100, Arkadiusz Miśkiewicz wrote: Shouldn't exim_tidydb make databases physically smaller? You'd like to think so, wouldn't you? However for reasons which are historical but mostly related to performance, Exim prefers to use the Berkeley DB library for its databases.

[exim] Slowing Blacklisted Authenticated Users

2012-11-23 Thread Matt
I have this to block users that authenticate and are on a blacklist. deny dnslists = some.black.list.or.another authenticated = * verify=recipient message = blocked authenticated sender Rather then block these I would like to rate limit black listed authenticated senders

[exim] SSL Certificate

2012-11-23 Thread The Doctor
Which is the best CS Cert vendor for Exim? -- Member - Liberal International This is doc...@nl2k.ab.ca Ici doc...@nl2k.ab.ca God,Queen and country!Never Satan President Republic!Beware AntiChrist rising! http://www.fullyfollow.me/rootnl2k Merry Christmas 2012 and Happy New Year 2013 -- This

Re: [exim] SSL Certificate

2012-11-23 Thread Phil Pennock
On 2012-11-23 at 19:37 -0700, The Doctor wrote: Which is the best CS Cert vendor for Exim? Define CS Cert? The only CS I know in certificate context is Code Signing, which is irrelevant. I'm guessing you're just after a Certificate Authority. For what purpose, with what user base? If you

Re: [exim] SSL Certificate

2012-11-23 Thread Mike Sprague
On 11/23/2012 09:37 PM, The Doctor wrote: Which is the best CS Cert vendor for Exim? openssl IMHO. Exim doesn't really care if the cert is 'real', so just generate one yourself for free. :-) MikeS -- ## List details at https://lists.exim.org/mailman/listinfo/exim-users ## Exim details at