Re: [exim] How reject HELLO with my IP

Pàgina inicial
Delete this message
Reply to this message
Autor: Mar Matthias Darin
Data:  
A: exim-users
Assumpte: Re: [exim] How reject HELLO with my IP
Hello,

Golovanoff Sergio writes:

>> Some spam hosts send MY IP address (xxx.xxx.xxx.xxx) in HELLO. See
>> following line:
>
>> How can I check HELLO and reject these hosts?


The following works very well for me:

 deny    condition     = ${lookup 
{${lc:$sender_helo_name}}lsearch{/usr/exim/MyIP}{yes}{no}}
         condition     = ${lookup 
{${lc:$sender_host_address}}lsearch{/usr/exim/MyIP}{no}{yes}}
         message       = Unknown User 


 deny    condition     = ${lookup 
{${lc:$sender_address_domain}}lsearch{/usr/exim/MyIP}{yes}{no}}
         condition     = ${lookup 
{${lc:$sender_host_address}}lsearch{/usr/exim/MyIP}{no}{yes}}
         message       = Unknown User 



The MyIP file is a simple text file with all of your *piblic* IP addresses
and domain names, in my case:

63.230.33.209
tanaya.net

The double test prevents any mistakes from my local LAN, I used NAT as well.