I want to have different helo's also, replacing helo with firewall is not very good idea...
We do this with a foundry switch. The ip for smtp.win.net is actually on the foundry switch, and the switch forwards connections to a cluster of machines on the back end.
