Re: [exim] How reject HELLO with my IP

Top Page
Delete this message
Reply to this message
Author: Mar Matthias Darin
Date:  
To: exim-users
Subject: Re: [exim] How reject HELLO with my IP
Hello,

Golovanoff Sergio writes:

>> Some spam hosts send MY IP address (xxx.xxx.xxx.xxx) in HELLO. See
>> following line:
>
>> How can I check HELLO and reject these hosts?


The following works very well for me:

 deny    condition     = ${lookup 
{${lc:$sender_helo_name}}lsearch{/usr/exim/MyIP}{yes}{no}}
         condition     = ${lookup 
{${lc:$sender_host_address}}lsearch{/usr/exim/MyIP}{no}{yes}}
         message       = Unknown User 


 deny    condition     = ${lookup 
{${lc:$sender_address_domain}}lsearch{/usr/exim/MyIP}{yes}{no}}
         condition     = ${lookup 
{${lc:$sender_host_address}}lsearch{/usr/exim/MyIP}{no}{yes}}
         message       = Unknown User 



The MyIP file is a simple text file with all of your *piblic* IP addresses
and domain names, in my case:

63.230.33.209
tanaya.net

The double test prevents any mistakes from my local LAN, I used NAT as well.