Customize Blockcracking

[sahostking]

We noticed that only when 100 failed emails are reached the system changes the password automatically and hence stops outgoing spam when a email accountn is compromised.

We are considering dropping this to 50 or even lower at 25. As we notice not many are being caught.

Is this the file to edit?
/etc/exim.blockcracking/variables.conf.custom

Do we just add the following:

BC_LIM == 50 - how many invalid emails can be send withn BC_PERIOD before block
BC_PERIOD == 1h - Period of time the invalid emails can be send before block

Any other recommendations will be appreciated.

Thanks

 

[johannes]

Seems correct, according to

account just send 100 email, set to 200 ?!

Hey all... i have set max 100 emails per user but for particular user i have changed the limit to 201 but... still when the user sends 150 emails... the accout gets blocked and sends the message of limit 100 triggered do i need to restart maybe something if i change this setting?

forum.directadmin.com

https://files.directadmin.com/services/blockcracking/README.html

 

[wtptrs]

We noticed that only when 100 failed emails are reached the system changes the password automatically and hence stops outgoing spam when a email accountn is compromised.

We are considering dropping this to 50 or even lower at 25. As we notice not many are being caught.

Is this the file to edit?
/etc/exim.blockcracking/variables.conf.custom

Do we just add the following:

BC_LIM == 50 - how many invalid emails can be send withn BC_PERIOD before block
BC_PERIOD == 1h - Period of time the invalid emails can be send before block

Any other recommendations will be appreciated.

Thanks

Yes, and after editing variables.conf.custom, run ./build exim_conf to apply the changes.

 

[sahostking]

Thanks