Frank Elsner wrote:
>> drop message = "REJECTED - Bad HELO - IP address not allowed [$sender_helo_name]"
>> condition = ${if isip {$sender_helo_name}}
> An IP is definitly allowd,
Only if in square brackets [], so isip is a good check. Most (if not
all) spammers with "EHLO x.x.x.x" use the IP of my host, btw, but I
don't check for that explicitely.
> but it must be the IP of the sendung host.
My MUA (Thunderbird) uses the private IP inside the NATed network. I
don't know a way to change that.
> condition = ${if eq {${lc:$sender_helo_name}}{${lc:$primary_hostname}}\
You could use "eqi" instead of "eq ... lc...".
And the following is more effective, I think:
condition = ${if !eq {$interface_address}{$sender_host_address}}
condition = ${if match_domain {$sender_helo_name}{+local_domains}}
