Re: [exim] A riddle: What HELO/EHLO does remote host send?

Top Page
Delete this message
Reply to this message
Author: Andrew - Supernews
Date:  
To: exim-users
Subject: Re: [exim] A riddle: What HELO/EHLO does remote host send?
>>>>> "Marc" == Marc Haber <mh+exim-users@???> writes:

>> (4) A selection of names, eg "localhost.localdomain".


Marc> During a period of time, newly installed Debian systems had
Marc> their /etc/hosts misconfigured in a way that an installed exim
Marc> 4 would HELO as localhost.localdomain. I suspect that most
Marc> rejections based on that rule are false positives,


You suspect wrong - HELO localhost.localdomain is a strong spam sign
(better than 95% counting by distinct IP addresses, and that's going
by a sample of more than 130,000 IPs).

--
Andrew, Supernews
http://www.supernews.com