Re: [exim] denying my IP in helo, easy retry for spammers?

Tony Finch wrote:
> On Tue, 30 Aug 2005, Joe Kocsis wrote:
> > If I want to stop spam messages that use my IP in the helo,
> > would I be better off blocking at the door via a helo acl? (or would
> > this just be an easy retry for them using another helo?)
> > Or by accepting the message and letting SA or a different exim acl do
> > the job, so that is done stealth to the spammer?
>
> They'll hammer away with randomised HELOs whetever you do.

I thought about recording the first seen HELO from an IP address to a
database. If that IP connects and uses a different HELO, it gets
blacklisted and thus useless. I have not tried it though.

--
Lab tests show that use of micro$oft causes cancer in lab animals