Re: Proper ACL condition to block failed rDNS lookup
Cyborg via Exim-users <[email protected]>
| Newsgroups | gmane.mail.exim.user |
|---|---|
| Message-ID | <[email protected]> |
Am 16.06.25 um 09:14 schrieb AC via Exim-users: > > I've added a rule in acl_smtp_connect to block connections from failed > rDNS but occasionally one seemingly slips through. I suspect it's > going through a different pathway but why would acl_smtp_connect not > block the below event? There's no indication in the logs about "no > host name found". Did this go through a different ACL entirely? > > SMTP protocol synchronization error (input sent without waiting for > greeting): rejected connection from H=[152.32.138.230] I=[10.0.0.6]:25 > input="\026\003\001\001\027\001" > The connect never happend, due to sending SSLv3 on a cleartext port ( 25 ) . There is nothing you can do here (inside exim), just ignore it. best regards, Cyborg -- ## subscription configuration (requires account): ## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/ ## unsubscribe (doesn't require an account): ## [email protected] ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
OpenPGP_0x048770A738345DD3.asc
(application/pgp-keys, 920 B)
-----BEGIN PGP PUBLIC KEY BLOCK----- xjMEYNCgKxYJKwYBBAHaRw8BAQdArodafJTXkIv7/P3ZTZS54icoOPq8yd6WKZLH RovvhLXNHUN5Ym9yZyA8Y3lib3JnMkBiZW5kZXJpcmMuZGU+wpEEExYIADkWIQRj wwZDcb5ODhI6BhkEh3CnODRd0wUCYNCgKwUJCWYBgAIbAwULCQgHAgYVCAkKCwIF FgIDAQAACgkQBIdwpzg0XdO0oQEA6OSSsKVmPNngRgL4o1avbAO9L9iOxbCK5YrF +kF+Qf0BAK3cXzNRCe3scFS6049g1KXllfDgmcqFt82xdPoq6kIEzTFNYXJpdXMg U2Nod2FyeiAoRXhpbSBUZWFtKSA8Y3lib3JnMkBiZW5kZXJpcmMuZGU+wpYEExYI AD4WIQRjwwZDcb5ODhI6BhkEh3CnODRd0wUCYOhQDgIbAwUJCWYBgAULCQgHAgYV CgkICwIEFgIDAQIeAQIXgAAKCRAEh3CnODRd01OlAQDbEiFQCTnWYotjUCIbfNZG 3FSJcW6XT5Y3lPUgAXAH8QEApbuKaQ/smdE/rkmD4podYCx3jWH/vGxNn98tSoil bALOOARg0KArEgorBgEEAZdVAQUBAQdA3q3BHLyIBKM795R7euJegjlZdb1/VlXY rv1a55TeyDUDAQgHwn4EGBYIACYWIQRjwwZDcb5ODhI6BhkEh3CnODRd0wUCYNCg KwUJCWYBgAIbDAAKCRAEh3CnODRd03hmAPsGanHWXMW+4TDbQwav8/5RuoUGS/Jh +KIv+f6tV+TdBgD9Fy2zQAfyidW3xB/PslnCKDB62CcIq67mDJdKtkYVdgg= =LhE8 -----END PGP PUBLIC KEY BLOCK-----
OpenPGP_signature.asc
(application/pgp-signature, 236 B)
-----BEGIN PGP SIGNATURE----- wnsEABYIACMWIQRjwwZDcb5ODhI6BhkEh3CnODRd0wUCaE/QkgUDAAAAAAAKCRAEh3CnODRd02EB AQCisHTLnAuFoec6HAUSof9ZzOfbG0DRr/tT0tAzs0K1QAD9HrF1NHZxIr0ddOc1xVL1PEzR5eU2 E69ElhlZzE8vwAw= =FVxE -----END PGP SIGNATURE-----