Alberto Bertogli 85305f4bd9 smtpsrv: Close the connection after 3 errors (lowering from 10) ...

Today, we close the connection after 10 errors. While this is fine for
normal use, it is unnecessarily large.

Lowering it to 3 helps with defense-in-depth for cross-protocol attacks
(e.g. https://alpaca-attack.com/), while still being large enough for
useful troubleshooting and normal operation.

As part of this change, we also remove the AUTH-specific failures limit,
because they're covered by the connection limit.

2021-06-11 10:34:20 +01:00

606 B

Raw Permalink Blame History

View Raw