Re: [Exim] rejecting based on HELO

トップ ページ
このメッセージを削除
このメッセージに返信
著者: Wakko Warner
日付:  
To: Billy Harvey
CC: exim-users
題目: Re: [Exim] rejecting based on HELO
> More and more of the spam I receive is sending the HELO line with *my*
> IP address. In the Received headers this is easy enough to see and
> auto-delete, but I want to be able to reject at recipt time - that is if
> the actual IP address doesn't match the stated IP address, I want to
> reject the mail.
>
> Any guidance on this?


I use this:
    drop    message = You may not use an HELO of this system's IP address
        log_message = HELO of this system's IP
        condition = ${if eq{$sender_helo_name}{216.98.75.249} \
                 {yes}{no} \
                 }


Of course, replace the IP with your IP or $interface_address (I think that's
right). This machine is behind a firewall so I have to use an IP.

I have this in my HELO acl. Thus far, anyone tripping on it doesn't come
back seconds/minutes later. But if they do, they get DROPped on the floor
by iptables.

--
Lab tests show that use of micro$oft causes cancer in lab animals