Dňa 2. 10. o 9:13 Cyborg via Exim-users napísal(a):
2023-10-02 04:48:31 SMTP call from (hello) [152.32.233.30] dropped: too many syntax or protocol errors (last command was "AUTH NTLM TlRMTVNTUAABAAAAB4IIAAAAAAAAAAAAAAAAAAAAAAA=", C=EHLO,HELP,AUTH)
From time to time i see these for years, the last was 12.9. thus long time before vulnerability was published...
"AUTH EXTERNAL" has not been tested and other attempts could not be identified yet.
AFAIK EXTERNAL requires TLS auth before, thus will not come from random untrusted hosts...
regards -- Slavko -- ## subscription configuration (requires account): ## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/ ## unsubscribe (doesn't require an account): ## exim-users-unsubscr...@lists.exim.org ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
