On Tuesday 16 September 2014 23:33:43 li...@rhsoft.net wrote: > > that still too much mail admins sadly don't care about 3 things > > * A record > * PTR > * HELO name > > and instead "reject_unknown_hostname" you need for a sane sleep > specific rules to at least reject insane HELO :-( >
thank you for your reply and the configuration excerpt. After reading yours and Bill Cole replies, i am now inclined to remove the hard check on the HELO dns resolvability favoring the "soft" check .... I am just contended between two approach. The first is maintaining the restriction, prepending with a whitelist lookup table populated in semi-automatic manner with a phase analyzing the logs to identify the unresolvable unique helos that need to be whitelisted. Or the second is converting the hard check to a soft one like yours with a table to reject clearly bogus names, that needs me to check not the smtp logs but the antismap/antivirus logs and then the headers of the actual messages to build the table. I am referring to your (our) mail administrators wisdom and experience. what is your opinion on these approaches? -Andrea-
