Author: Exim Mailing List Date: To: exim-users Subject: Re: [exim] Applying Blacklists to EVERY IP in Reveived headers -
working !!!!
On Thu, Jun 07, 2007 at 11:35:00AM -0400, Dave Pooser wrote: > > I think you are right. How can we work around that? Can we check all IP
> > addresses EXCEPT the last one?
>
> And if the last address is my RFC1918 address connecting to my mail server
> inside my network before relaying via a smarthost? So now you exempt the
> last two addresses...
This example is specifically why this cannot easily, if at all, be
done within an ACL. You would need to walk up the list of received
headers to find the first real address before making an evaluation,
and even then, care has to be taken for any forged addresses/headers that
may be present.
This sort of intelligence is best left to readsocket{} calls or imbedded perl.
