The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Is there an ACL for exim for rejecting SMTP connects from certain countries?

Discussion in 'E-mail Discussions' started by jols, Jun 7, 2014.

  1. jols

    jols Well-Known Member

    Joined:
    Mar 13, 2004
    Messages:
    1,111
    Likes Received:
    2
    Trophy Points:
    38
    Hi folks,

    I've been searching for a solution for this, for well over two years. If anyone can help, I'd certainly appreciate it.

    I'm looking for something like this, but that works with EXIM instead of Postfix:

    Postfix GeoIP Based Rejections | KutuKupret : KutuKupret

    Postfix GeoIP Based Rejections

    So if, let's say, one of our hosted email member's account passwords gets stolen (or guessed), then if a spammer tries to log into their account, and if they are from a blacklisted country, e.g. Romania, then they will be prevented from connecting with the SMTP services on the server, i.e. to broadcast spam though the hosted member's email.

    Ideally, I'd like to find a way of whitelisting, in EXIM locations in North America and the UK, so that SMTP can only be connected (to send email) from those locations. Also I'd like to create exceptions to this rule from those few accounts that reside outside this whitelisted territory.

    This should not be all the tough of a problem, right? We have GeoIP installed on the server, so...

    Thanks much.
     
  2. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    14,482
    Likes Received:
    203
    Trophy Points:
    63
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
    Are you aware of the option in CSF for this sort of thing? See the readme, section:
    26. Exim SMTP AUTH Restriction

    May be of some use to you.
     
  3. jols

    jols Well-Known Member

    Joined:
    Mar 13, 2004
    Messages:
    1,111
    Likes Received:
    2
    Trophy Points:
    38
    Thanks Infopro for taking the time to respond.

    Yes, it was a real fore-head-slapper when I found this among the options in our CSF installations at 2am this morning. We've been using CSF for years, and yup, it's right there.

    I think I need a new pair of glasses :eek:
     
  4. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    14,482
    Likes Received:
    203
    Trophy Points:
    63
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
    Happy to help.
     
Loading...

Share This Page