Re: [Exim] matching sender_helo_name in a named list

Top Page
Delete this message
Reply to this message
Author: Franz Georg Köhler
Date:  
To: Exim-users list
Subject: Re: [Exim] matching sender_helo_name in a named list
On Di, Apr 20, 2004 at 01:42:29 -0700, Tor Slettnes <tor@???> wrote:
>
> On Apr 20, 2004, at 12:56, Franz Georg Köhler wrote:
> >On Di, Apr 20, 2004 at 07:45:31 +0200, Anand Buddhdev
> ><anand@???> wrote:
> >>domainlist local_domains = mysql;select distinct domain from users \
> >>where domain='$domain';
> >>
> >>I then use the named list "local_domains" in various tests in the RCPT
> >>ACL.
> >This is what I use:
> >
> >  deny    message = Invalid HELO ($sender_helo_name): Your name is
> >hard to believe.
> >          hosts   = !+relay_from_hosts
> >          log_message = Forged HELO detected
> >          condition = ${if eq
> >{${lc:$sender_helo_name}}{${lc:$domain}}{yes}{no}}

>
> That probably will not cut it in Anand's case, because it seems like he
> has a whole list of local domains. But maybe the following will (a
> simplified version of what I use):


Since SPAMers often use their target's domain as HELO, it catches a lot
of SPAM.