Re: [exim] How to limit the number of emails sent by each user

2017-12-19 Thread Lena--- via Exim-users
> From: Sebastian Nielsen

> I would suggest using an config that restricts authenticated users to
> a specific IP range. Then no bots from china can successfully guess a
> account.

I restrict authenticated users to a non-standard port (neither 25, 465 nor 587):

daemon_smtp_ports = 25 : 1234

 accept authenticated = *
condition = ${if !={$received_port}{25}}
control = submission/domain=

If bots aren't blocked, they waste connection time and RAM, in effect like DoS.
This https://github.com/Exim/exim/wiki/BlockCracking blocks bots from both
wasting resources and spamming.

> That will prevent accounts from being hacked and used in spamming

Passwords mostly are stolen with Windows malware or phishing.

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] How to limit the number of emails sent by each user

2017-12-18 Thread Sebastian Nielsen via Exim-users
I would suggest using an config that restricts authenticated users to
a specific IP range. Then no bots from china can successfully guess a
account.

Something like:
  accept
authenticated = *
hosts = +relay_from_hosts

Then add:
hostlist relay_from_hosts = Your_local_network_or_ISP_range/CIDR
auth_advertise_hosts = Your_local_network_or_ISP_range/CIDR

A simple idea if you have a lot of users "outside" your Corporation,
use GeoIP instead to restrict relay_from_hosts and
auth_advertise_hosts to the same country as the server is located in.

That will prevent accounts from being hacked and used in spamming, as
the sender must BOTH be inside correct network AND have
username/password to be allowed.

2017-12-18 11:52 GMT+01:00 Lena--- via Exim-users :
>> From: "Ronaldo Luiz de Carvalho"
>
>> how to limit the number of emails sent by each user?
>>
>> I use WHM and I can limit by a domain account, but into a domain I want to
>> set limit to a specific account.
>
> Usually such limits are in order to catch spammers.
> But the limits are either low and inconvenient for honest users
> or high and allow spam to trickle through.
> There is another approach to rate limiting in order to catch spammers:
> https://github.com/Exim/exim/wiki/BlockCracking
>
> --
> ## List details at https://lists.exim.org/mailman/listinfo/exim-users
> ## Exim details at http://www.exim.org/
> ## Please use the Wiki with this list - http://wiki.exim.org/

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] How to limit the number of emails sent by each user

2017-12-18 Thread Lena--- via Exim-users
> From: "Ronaldo Luiz de Carvalho"

> how to limit the number of emails sent by each user?
> 
> I use WHM and I can limit by a domain account, but into a domain I want to
> set limit to a specific account.

Usually such limits are in order to catch spammers.
But the limits are either low and inconvenient for honest users
or high and allow spam to trickle through.
There is another approach to rate limiting in order to catch spammers:
https://github.com/Exim/exim/wiki/BlockCracking

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] How to limit the number of emails sent by each user

2017-12-17 Thread Dennis Davis via Exim-users
On Mon, 18 Dec 2017, Ronaldo Luiz de Carvalho via Exim-users wrote:

> From: Ronaldo Luiz de Carvalho via Exim-users 
> To: exim-users@exim.org
> Cc: 'ronaldo' 
> Date: Mon, 18 Dec 2017 02:28:30
> Subject: [exim] How to limit the number of emails sent by each user
> Reply-To: Ronaldo Luiz de Carvalho 
>
> Could anyone give a help about how to limit the number of emails
> sent by each user?
>
> I use WHM and I can limit by a domain account, but into a domain I
> want to set limit to a specific account.
>
> There are a way to do this?

Sounds like you need ratelimiting.  I've never had to make serious
use of ratelimiting.  See the relevant section of the manual:

http://www.exim.org/exim-html-current/doc/html/spec_html/ch-access_control_lists.html#SECTratelimiting

I'm sure there will someone along to give more pertinent advice.
-- 
Dennis Davis 

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


[exim] How to limit the number of emails sent by each user

2017-12-17 Thread Ronaldo Luiz de Carvalho via Exim-users
Hi all

 

Could anyone give a help about how to limit the number of emails sent by
each user?

 

I use WHM and I can limit by a domain account, but into a domain I want to
set limit to a specific account.

 

There are a way to do this?

 

Thanks in advance for any help.

 

Best regards,

 

Ronaldo Luiz

 

 

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/