On 2017-11-11, Always Learning <exim@???> wrote: >
> On Fri, 2017-11-10 at 18:38 +0300, Александр Кириллов via Exim-users
> wrote:
>
>> 2017-11-09 23:15:02 1eCtE6-0002Q1-6H H=(xxxxx.xxxxxxxxx.xxxx) [127.0.0.1]
>
> If the HELO/EHLO = 127.0.0.1 then you should immediately reject the
> message. No point in further processing of any description.
looks more like helo was xxxxx, and the connection was from localhost.
xxxxx was probaby a lie, 127.0.0.1 may be untrue also.
--
This email has not been checked by half-arsed antivirus software
