A while back I setup a helo.regexp file. I have changed it around a bit. I'm trying to stop e-mail that is sent to/from the same e-mail address but not my system. The idea was if they are sending mail to themselves from my ip address. It would be blocked.

Example from my test server:

/^webserv\.idahofur\.com$/      550 Don't use my own hostname
/^216\.201\.76\.183$/           550 Don't use my own IP address
/^[0-9.]+$/                     550 Your software is not RFC 2821 compliant
/^[0-9]+(\.[0-9]+){3}$/         550 Your software is not RFC 2821 compliant




Example from my log:

Jun 13 20:10:45 primary postfix/smtpd[1322]: connect from exprod6mx190.postini.com[64.18.1.42] Jun 13 20:10:47 primary postfix/smtpd[1322]: AB47810D8005: client=exprod6mx190.postini.com[64.18.1.42] Jun 13 20:10:49 primary postfix/cleanup[1325]: AB47810D8005: hold: header Received: from psmtp.com (exprod6mx190.postini.com$ Jun 13 20:10:49 primary postfix/cleanup[1325]: AB47810D8005: message-id=<20100614021047.ab47810d8...@primary.mychoice.cc> Jun 13 20:10:49 primary MailScanner[28889]: New Batch: Scanning 1 messages, 12557 bytes
Jun 13 20:10:49 primary MailScanner[28889]: Spam Checks: Starting
Jun 13 20:10:49 primary MailScanner[28889]: Expired 1 records from the SpamAssassin cache Jun 13 20:10:49 primary postfix/smtpd[1322]: disconnect from exprod6mx190.postini.com[64.18.1.42] Jun 13 20:10:50 primary MailScanner[28889]: Virus and Content Scanning: Starting Jun 13 20:10:55 primary MailScanner[28889]: Requeue: AB47810D8005.4CC84 to EA43910D8139
Jun 13 20:10:55 primary MailScanner[28889]: Uninfected: Delivered 1 messages
Jun 13 20:10:55 primary postfix/qmgr[20454]: EA43910D8139: from=<meusb...@testcompany.net>, size=11920, nrcpt=1 (queue active)
Jun 13 20:10:55 primary MailScanner[28889]: MailScanner child dying of old age
Jun 13 20:10:55 primary postfix/virtual[1337]: EA43910D8139: to=<meusb...@testcompany.net>, relay=virtual, delay=8.9, delays=8$
Jun 13 20:10:55 primary postfix/qmgr[20454]: EA43910D8139: removed

Thanks,

Josh


--
This message has been scanned for viruses and
dangerous content by Mychoice, and is
believed to be clean.

Reply via email to