Re: [exim] How reject HELLO with my IP

Page principale
Supprimer ce message
Répondre à ce message
Auteur: bclark
Date: 2006-03-09 04:38 -000
À: exim-users
Sujet: Re: [exim] How reject HELLO with my IP
Viktor Vislobokov wrote:
> Hi!
>
> Some spam hosts send MY IP address (xxx.xxx.xxx.xxx) in HELLO. See
> following line:
>
> 2006-03-07 16:00:57 H=(xxx.xxx.xxx.xxx) [61.109.9.90]
> F=<info@???> rejected RCPT <user@???>: Unknown user
>
> How can I check HELLO and reject these hosts?
>


Hi Viktor

Under acl_check_rcpt acl

I added the following for my ACL (got this off the Exim Wiki - Works like a bomb)

## Forged HELOs

   deny  message         = HELO/EHLO required by SMTP RFC
         condition       = ${if eq{$sender_helo_name}{}{yes}{no}}



   drop  message = "REJECTED - Bad HELO - IP address not allowed [$sender_helo_name]"
         condition = ${if isip {$sender_helo_name}}



Also you may want to look @ the spam filtering section on the Wiki, These some kewl ideas etc.

HTH

Kind Regards
Brent Clark