Hello,
Golovanoff Sergio writes:
>> Some spam hosts send MY IP address (xxx.xxx.xxx.xxx) in HELLO. See
>> following line:
>
>> How can I check HELLO and reject these hosts?
The following works very well for me:
deny condition = ${lookup
{${lc:$sender_helo_name}}lsearch{/usr/exim/MyIP}{yes}{no}}
condition = ${lookup
{${lc:$sender_host_address}}lsearch{/usr/exim/MyIP}{no}{yes}}
message = Unknown User
deny condition = ${lookup
{${lc:$sender_address_domain}}lsearch{/usr/exim/MyIP}{yes}{no}}
condition = ${lookup
{${lc:$sender_host_address}}lsearch{/usr/exim/MyIP}{no}{yes}}
message = Unknown User
The MyIP file is a simple text file with all of your *piblic* IP addresses
and domain names, in my case:
63.230.33.209
tanaya.net
The double test prevents any mistakes from my local LAN, I used NAT as well.