Re: [exim] How reject HELLO with my IP

Viktor Vislobokov wrote:
> Hi!
>
> Some spam hosts send MY IP address (xxx.xxx.xxx.xxx) in HELLO. See
> following line:
>
> 2006-03-07 16:00:57 H=(xxx.xxx.xxx.xxx) [61.109.9.90]
> F=<info@???> rejected RCPT <user@???>: Unknown user
>
> How can I check HELLO and reject these hosts?
>

Hi Viktor

Under acl_check_rcpt acl

I added the following for my ACL (got this off the Exim Wiki - Works like a bomb)

## Forged HELOs

   deny  message         = HELO/EHLO required by SMTP RFC
         condition       = ${if eq{$sender_helo_name}{}{yes}{no}}

   drop  message = "REJECTED - Bad HELO - IP address not allowed [$sender_helo_name]"
         condition = ${if isip {$sender_helo_name}}

Also you may want to look @ the spam filtering section on the Wiki, These some kewl ideas etc.

HTH

Kind Regards
Brent Clark