Re: [exim] Rejecting faked numeric HELO

Page principale
Supprimer ce message
Répondre à ce message
Auteur: John Horne
Date:  
À: Exim users
Sujet: Re: [exim] Rejecting faked numeric HELO
On Mon, 2005-06-06 at 15:50 +0200, Frank Elsner wrote:
>
> Yes, an IP is allowed but it must be the one of the sending host.
>

Well strictly I gather a pure IP address is not allowed, for any sending
host. An IP-literal is allowed (and should match the sending hosts IP
address), but you are not testing for that because the 'isip' test will
fail when testing an IP-literal. Perhaps instead something like this
(untested):

  deny  condition = ${if and { \
                      { isip {$sender_helo_name}}\
                      { !eq  {$sender_helo_name}{$sender_host_address}}\
                             } {yes}{no}


  deny  condition = ${if and { \
                      {match {$sender_helo_name} {\N^\[([0-9.]+)\]$\N}}\
                      {! match {$sender_host_address} {$1}} }}




John.

-- 
---------------------------------------------------------------
John Horne, University of Plymouth, UK  Tel: +44 (0)1752 233914
E-mail: John.Horne@???       Fax: +44 (0)1752 233839