News for hackers. Stuff that matters.
Re:Ask HN: How do you protect your Mailserver from DDoS Atta... by zimpenfish on Friday August 14, 2020 @04:47AM (#24155470)
> If they try to login 30 times in an 1 hour, then it's definitely not a legit user in any case.

I have

* `exim-usernames` - 10 day ban instantly for anyone trying to login with a specific set of usernames (227 currently banned)

* `exim-aggressive` - 4h ban for repeated failures (SSL, EHLO, etc.) (7 currently banned)

* `exim-spam` - 4h ban for repeated spam rejections. (0 currently banned)

Plus `rspamd` for greylisting, honeypot addresses, etc.

There are no comments on this comment yet.