Kai Krakow:
> >> smtpd_client_event_limit_exceptions = dnsxl:xbl.spamhaus.org
> >
> > Except that this does not block AUTH commands. Currently all that
> > smtpd_client_event_limit_exceptions does is not announce AUTH support
> > in the EHLO response.
>
> Hey thanks, I love the potential of this. But how could I block AUTH
> altogether then? Because that way postfix could be made stop disclosing
> information about wrong or false credentials to unwanted clients.
Currently, you can turn off the AUTH announcement only.
> BTW: Why does smtpd_client_event_limit_exceptions stop announcing AUTH
> commands? From the docs I would never understand that it acts this way:
Sorry, that should have been smtpd_sasl_exceptions_networks.
Wietse
