Re: [exim] Rejecting faked numeric HELO

Inizio della pagina
Delete this message
Reply to this message
Autore: John Horne
Data:  
To: Exim users
Oggetto: Re: [exim] Rejecting faked numeric HELO
On Mon, 2005-06-06 at 14:29 +0200, Frank Elsner wrote:
>
> I use with success:
>
>   deny message = Illegal argument in HELO/EHLO ($sender_helo_name)
>        log_message = Strange IP addr given
>        condition = ${if and {\
>                        { isip {$sender_helo_name}}\
>                        { !eq  {$sender_helo_name}{$sender_host_address}}\
>                        { !eq  {$sender_helo_name}{[$sender_host_address]}}\
>                             }\
>                         {yes}{no}}

>

Hello,

Surely though if 'isip' matches the sender_helo_name, then an IP literal
(in the square brackets) will never match the sender_host_address (so
your third test will always be true)? I'm assuming that 'isip' matches
an actual IP address, and not an IP address in square brackets?

Secondly, my understanding was that an IP-literal was allowed (by RFC)
in the HELO command, and as such there's no reason for rejecting it?


Regards,

John.

-- 
---------------------------------------------------------------
John Horne, University of Plymouth, UK  Tel: +44 (0)1752 233914
E-mail: John.Horne@???       Fax: +44 (0)1752 233839