On Mon, Jun 10, 2013 at 01:17:19AM +1000, Nikolas Kallis wrote:
> Is using 'reject_non_fqdn_helo_hostname' and
> 'reject_invalid_helo_hostname' even neccessary when using
> 'reject_unknown_helo_hostname'?
You seem to have decided that the client HELO name is a silver
bullet against spam and the evils of RFC non-conformance. This is
far from true. Don't waste your time on this. The last of these
three restrictions is almost neve used, it is neither safe to use
(too much legitimate email rejected) nor very effective.
More fine-grained table lookups (regexp, or even exact matches) on
the actual HELO name sent are far more likely to be safe and be
somewhat useful (still not worth the effort in most cases IMHO).
Perhaps we can move on to another topic.
--
Viktor.
