On Tue, 11 May 1999, Philip Hazel wrote:
> On Mon, 10 May 1999, Microwave Systems Eximlist Exploder wrote:
>
> > It would be cool, if in RBL reject log entries, if exim is going to
> > include the HELO-name, if is said "helo=" in the log for that, and if
> > it could be configured to also do a reverse DNS query for the IP (if it
> > hasnt already done so), and include the real hostname as well...
>
> The problem here is that the RBL lookup happens right at the start of
> the connection, before the HELO has been received.
Aha.. the problem is with the rbl_reject_recipients, and the logging
wrt that.. _that_ loges the helo name when recorded the rejected
recipients, and doesn't make it clear that it is the helo name, not the
real DNS-derived name of the host.. It would be nice if it said "helo="
before the name in the parens, and possibly a run-time config item to
force a reverse DNS to be done if it hasnt already, and have the result
logged with the IP address..
> > While we're at it, would it be possible to log the HELO string to the
> > main log?
>
> Already done. From the spec:
>
> The H and U fields identify the remote host and record the RFC 1413 identity
> of the user that sent the message, if one was received. The number given in
> square brackets is the IP address of the sending host. If there is just a
> single host name in the H field, as above, it has been verified to correspond
> to the IP address (see the host_lookup_nets option). If the name is in
> parentheses, it was the name quoted by the remote host in the SMTP HELO or
> EHLO command, and has not been verified. If verification yields a different
> name to that given for HELO or EHLO, then the verified name appears first,
> followed by the HELO or EHLO name in parentheses.
>
> --
> Philip Hazel University of Cambridge Computing Service,
> ph10@??? Cambridge, England. Phone: +44 1223 334714.
>
>
--
*** Exim information can be found at
http://www.exim.org/ ***