On 2011-10-10 12:22, Pim Zandbergen wrote:
For a couple of weeks I have been using "reject_unknown_helo_hostname" in
my "smtpd_helo_restrictions". This has helped to reject some 500
unsolicited
mail messages per day, on a total of around 1500.
Unfortunately, I've had to whitelist some 10 mail servers that are
misconfigured
but legitimate. I tried to educate each and everyone of their admins.
Only one
admin changed their system's helo name; their system runs Postfix...
All the other are Exchange servers or MailMarshal admins that keep
claiming
it's our problem, because everyone else accepts their mail.
It would help if there were some authoritative online SMTP test server
Why ? How would that help YOU in this scenario ?
The fact is that, even though RFC 5321 mandates the use of a valid
hostname in EHLO, many mail server systems don't provide one.
Just stick to reject_invalid_helo_hostname to catch the more egregious
offenders - or make up your own rules with a check_helo_access map:
http://www.postfix.org/postconf.5.html#check_helo_access
You can combine complex regular expressions and file- or network lookups.
--
J.