Re: help with how to drop connection on syntax error

Ian Z via Exim-users <[email protected]> Wed, 1 Jul 2026 12:48:59 -0700
Newsgroups gmane.mail.exim.user
Message-ID <[email protected]>
On Wed, Jul 01, 2026 at 10:59:11AM +0200, Cyborg via Exim-users wrote:

> > I was hoping someone here could help me with this.  How can I make
> > exim DROP the connection faster, in response to being dos flooded
> > with gibberish.  How, and where, can I make it DROP on first
> > syntax error, instead of it sending back countless "500
> > unrecognized command" or "501 NUL characters are not allowed in
> > SMTP commands" and what not, then sitting there witting for
> > smtp_receive_timeout.

> smtp_max_synprot_errors = 0

> One false HELO etc. and they are gone.

By the way, I have a patch that adds an "event" in that code path,
which I then hook into and add such hosts into the "seen" database.
If they try reconnecting soon enough, they're blocked based on the IP
;-)

It's amazing or astonishing how many connections I get on port 25
with the other side trying to talk HTTP.

-- 
Ian

-- 
## subscription configuration (requires account):
##   https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
##   [email protected]
## Exim details at https://www.exim.org/
## Please use the Wiki with this list - https://code.exim.org/exim/wiki/wiki