>>Tedious, isn't it. I get probed by 5000 hosts per day. I've now set fail2ban to "one strike and you're out".
I solved that with: auth_advertise_hosts = 192.168.0.0/16 : 127.0.0.1 : ::::1 Then it doesn't matter if they have the correct password, they wont get access anyways... Looks like this in logs: 2022-06-10 23:50:20 SMTP protocol error in "AUTH LOGIN" H=(User) [45.85.190.59] AUTH command used when not advertised 2022-06-10 23:59:58 SMTP protocol error in "AUTH LOGIN" H=(User) [45.85.190.59] AUTH command used when not advertised 2022-06-11 00:06:16 SMTP protocol error in "AUTH LOGIN" H=(User) [212.192.241.44] AUTH command used when not advertised 2022-06-11 00:09:27 SMTP protocol error in "AUTH LOGIN" H=(User) [45.85.190.59] AUTH command used when not advertised 2022-06-11 00:19:11 SMTP protocol error in "AUTH LOGIN" H=(User) [45.85.190.59] AUTH command used when not advertised 2022-06-11 00:25:08 SMTP protocol error in "AUTH LOGIN" H=(User) [212.192.241.44] AUTH command used when not advertised 2022-06-11 00:28:34 SMTP protocol error in "AUTH LOGIN" H=(User) [45.85.190.59] AUTH command used when not advertised 2022-06-11 00:38:17 SMTP protocol error in "AUTH LOGIN" H=(User) [45.85.190.59] AUTH command used when not advertised 2022-06-11 00:44:11 SMTP protocol error in "AUTH LOGIN" H=(User) [212.192.241.44] AUTH command used when not advertised 2022-06-11 00:47:41 SMTP protocol error in "AUTH LOGIN" H=(User) [45.85.190.59] AUTH command used when not advertised 2022-06-11 00:57:24 SMTP protocol error in "AUTH LOGIN" H=(User) [45.85.190.59] AUTH command used when not advertised 2022-06-11 01:03:20 SMTP protocol error in "AUTH LOGIN" H=(User) [212.192.241.44] AUTH command used when not advertised 2022-06-11 01:06:49 SMTP protocol error in "AUTH LOGIN" H=(User) [45.85.190.59] AUTH command used when not advertised 2022-06-11 01:16:32 SMTP protocol error in "AUTH LOGIN" H=(User) [45.85.190.59] AUTH command used when not advertised 2022-06-11 01:23:54 SMTP protocol error in "AUTH LOGIN" H=(User) [212.192.241.44] AUTH command used when not advertised 2022-06-11 01:25:56 SMTP protocol error in "AUTH LOGIN" H=(User) [45.85.190.59] AUTH command used when not advertised 2022-06-11 01:35:34 SMTP protocol error in "AUTH LOGIN" H=(User) [45.85.190.59] AUTH command used when not advertised 2022-06-11 01:45:01 SMTP protocol error in "AUTH LOGIN" H=(User) [45.85.190.59] AUTH command used when not advertised 2022-06-11 01:51:10 SMTP protocol error in "AUTH LOGIN" H=(User) [212.192.241.44] AUTH command used when not advertised 2022-06-11 01:54:40 SMTP protocol error in "AUTH LOGIN" H=(User) [45.85.190.59] AUTH command used when not advertised 2022-06-11 02:04:08 SMTP protocol error in "AUTH LOGIN" H=(User) [45.85.190.59] AUTH command used when not advertised 2022-06-11 02:06:05 SMTP protocol error in "AUTH LOGIN" H=(User) [212.192.241.44] AUTH command used when not advertised 2022-06-11 02:13:46 SMTP protocol error in "AUTH LOGIN" H=(User) [45.85.190.59] AUTH command used when not advertised 2022-06-11 02:20:29 SMTP protocol error in "AUTH LOGIN" H=(User) [212.192.241.44] AUTH command used when not advertised -- ## List details at https://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
