On 12/5/15 11:28 PM, Noel Jones wrote:
>>This is the spamming host:
>>
>> >unbound-host -rvD 78-134-2-123.v4.ngi.it
>>78-134-2-123.v4.ngi.it has address 78.134.2.123 (insecure)
>>78-134-2-123.v4.ngi.it has no IPv6 address (insecure)
>>78-134-2-123.v4.ngi.it has no mail handler record (insecure)
>>
>>This is Postfix:
>>
>># postfix/port-25/smtpd[35013]: connect from
>>78-134-2-123.v4.ngi.it[78.134.2.123]:3431
It's now obvious that you're talking about the client hostname, not
the sender domain.
It is the machine that first hit my server.
In my church, that's the sending machine.
No, I won't wait for the FROM header:
such junk must be rejected upfront.
Best wishes to you...
