RE: [Exim] wildcard blacklisting by HELO?

Top Page
Delete this message
Reply to this message
Author: Scott Truman
Date:  
To: Victor Forsyuk
CC: exim-users
Subject: RE: [Exim] wildcard blacklisting by HELO?
Thanks for this...your regex expressions work well; how do I use wild
card regex's?

i.e I get many HELO's in the form:

c-24-9-152-139.client.comcast.net
adsl-69-212-19-224.dsl.milwwi.ameritech.net

Using * or ? As wilcards does not seem to work for me:-

I have lines such as:
\.client\.comcast\.net
\.dsl\.*\.ameritech\.net


Obviously I am doing something wrong...?

Help appreciated.

cheers
Scott

-----Original Message-----
From: Victor Forsyuk [mailto:victor@gu.net]
Sent: Wednesday, 18 February 2004 7:16 a.m.
To: Scott Truman
Cc: exim-users@???
Subject: Re: [Exim] wildcard blacklisting by HELO?


On Wed, Feb 18, 2004 at 12:37:53AM +1300, Scott Truman wrote:
> Can anybody help here, please?


My config snippet:

# define macro to refer in ACL REJECTHELO=/etc/exim/acls/helorejectrcpt

And, in appropriate place at RCPT ACL:

  deny condition = ${lookup
{$sender_helo_name}nwildlsearch{REJECTHELO}{yes}{no}}
       hosts   = ! +relay_from_hosts
       message = Mail is blocked: ${lookup
{$sender_helo_name}nwildlsearch{REJECTHELO}{$value}}



My REJECTHELO file contains entries like:

^\d+-\d+-\d+
^ip[0-9a-f]{8}\.speed\.planet\.nl ^h\d+n\d+fls\d+o\d+\.telia\.com
^dialup-
^user\d{1,3}\.net\d{2,3}

and so on (with corresponding message in each line, naturally).


> --------------------
> Hi there,
> I wish to black list at smtp time based on the HELO command. At the
> moment I have a number of ACLs such as the one that follows, hardwired


> into my exim.conf file.
>
> deny message = "Blacklisted HELO"
> condition = ${if eq{$sender_helo_name}{youkickedmydog.net}{yes}{no}}
>
> What I wish to do is actually be able to place all the restricted HELO


> hosts into an external file and include wild cards.
>
> i.e the file would have one host per line and would include entries
> such
> as:
>
> youkickedmydog.net
> *.dialup.comcast.net