On 30-Mar-2009, at 14:40, Noel Jones wrote:

LuKreme wrote:
On 30-Mar-2009, at 13:20, Carlos Williams wrote:
Received: from 59.165.5.205.man-static.vsnl.net.in (unknown [59.165.5.205])
   by mail.ideorlando.org (Postfix) with ESMTP id 910AA1FA4D9E
for <[email protected]>; Mon, 30 Mar 2009 10:32:52 -0400 (EDT)
There are so many spam warnings in that header...
/^unknown$/ REJECT helo No unknown hostnames
in your helo checks is a fantastic idea.

"unknown" isn't the helo, it's an unknown client. This client could be rejected with reject_unknown_client_hostname, but that rejects too much legit mail for most sites.

It's also not a FQDN (or at least not a valid one).


Rejecting IP looking DNS names is a good idea too
Something like this:
/(d{1,3}[.-]){3}[.-]\d{1,3}/ REJECT Too many numbers in your hostname

That would work as a check_helo_access map, but note the client used this as a HELO hostname, not a DNS entry. This is "mostly" safe as a helo check.

I was talking about helo checks.


--
Try to realize it's all within yourself/No one else can make you
        change

Reply via email to