* Wietse Venema <wie...@porcupine.org>:
> Stefan Foerster:
> > What happens after "gate" has tried to validate more than
> > "$smtpd_soft_error_limit" invalid recipients? Will it be slowed down?
> > Is it possible to exclude "gate" from that artificial slowdown on
> > "hub" using smtpd_client_event_limit_exceptions?
> > 
> > Disclaimer/for the archive: In cases like that, it's probably much
> > better to provide a list of valid recipients to "gate".
> 
> Tarpit delays by the hub will slow down the dictionary attack.
> Is that a problem?

It can delay legitimate mail with yet unverified recipients, but
that's pretty much what one would suspect during a dictionary attack.
Other than that, I cannot think of any scenario where this might
become a real problem (it might confuse postmasters/admins who are not
used to seeing a large number of mails with $address_verify_sender in
their queues).

It would still be nice to know whether smtpd_client_event_limit_exceptions
will prevent the additional delays.


Stefan

Reply via email to