I have:

smtpd_helo_required = yes
smtpd_helo_restrictions = reject_invalid_helo_hostname,
                          reject_non_fqdn_helo_hostname,
                          reject_unknown_helo_hostname

So I was very surprised recently when I started getting spam accepted
that looks like it is giving a non routable literal IP HELO and it isn't
being rejected.  How is this getting past the invalid and non fqdn helo
checks?  Also it looks like it skipped MAIL FROM.  Isn't there a
restriction to block that?

Return-Path: <>
X-Original-To: ph...@thesusis.net
Delivered-To: ph...@thesusis.net
Received-SPF: None (no SPF record) identity=helo; client-ip=34.13.156.68; 
helo=[10.88.0.4]; envelope-from=<>; receiver=thesusis.net 
Received: from [10.88.0.4] (68.156.13.34.bc.googleusercontent.com 
[34.13.156.68])
        by vps.thesusis.net (Postfix) with ESMTP id ED88881E32
        for <ph...@thesusis.net>; Mon,  7 Apr 2025 09:52:55 -0400 (EDT)
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to