Re: [Exim] exim HELO ack

Startseite
Nachricht löschen
Nachricht beantworten
Autor: Suresh Ramasubramanian
Datum:  
To: Andy Rabagliati
CC: exim users
Betreff: Re: [Exim] exim HELO ack
Andy Rabagliati [8/31/2003 7:41 PM] :
> I also added tests for the ip address of my mail machine as well
> (spam spoofing me as the sender) which also catches a /large/
> amount of spam.


Try these - from an earlier post I made: (in acl_check_rcpt)

# Spam control

# Be polite and say HELO. Reject anything from hosts that havn't given
# a valid HELO/EHLO to us.
  deny condition = ${if \
    or{{!def:sender_helo_name}{eq{$sender_helo_name}{}}}{yes}{no}}
           message = RFCs mandate HELO/EHLO before mail can be sent


# Forged hostname - HELOs as my own hostname or domain
  deny    message = Forged hostname detected in HELO: $sender_helo_name
     hosts   = !+relay_from_hosts
     log_message = Forged hostname detected in HELO: \
     $sender_helo_name
     condition = ${lookup {$sender_helo_name} \
         lsearch{/usr/local/etc/exim/local_domains}{yes}{no}}


# Forged hostname -HELOs as one of my own IPs
  deny message = Forged IP detected in HELO: $sender_helo_name
         hosts = !+relay_from_hosts
         log_message = Forged IP detected in HELO: $sender_helo_name
     condition = ${if \
     eq{$sender_helo_name}{$interface_address}{yes}{no}}