On Mon, 1 Sep 2003, Oliver Eikemeier wrote:
> In exim 4 something like:
>
> helo_try_verify_hosts = *
>
> acl_smtp_helo = acl_check_helo
>
> acl_check_helo:
>
> deny message = Faked IP in HELO/EHLO
> condition = ${if match{$sender_helo_name}{\N^\d{1,3}(\.\d{1,3}){3}$\N}{yes}{no}}
> !verify = helo
>
> does not work, because the helo_try_verify_hosts verification
> in src/smtp_in.c is done after the helo ACL.
Aarrgghh!!
> Does it make sense to move the ACL check after the helo_try_verify_hosts verification:
Probably. This looks like an accident/mistake. Thanks for the patch. I
will check it out, just to be absolutely sure.
Regards,
Philip
--
Philip Hazel University of Cambridge Computing Service,
ph10@??? Cambridge, England. Phone: +44 1223 334714.