On Wed, Feb 10, 2021 at 11:59:39PM +0300, Eugene Podshivalov wrote:
> > Viktor Dukhovni:
> > The actual expectation is that the EHLO name is a valid DNS hostname,
> > and should resolve to the IP address of the client.
>
> Postfix does not seem to be able to check this right now. Wouldn't it be
> good to have such features in smtpd_helo_restrictions?
Postfix can check that the EHLO name resolves to some IP address. There
is no check that the address is that of the connecting client, because
that is not a sufficiently useful policy criterion.
--
Viktor.
