On 21. jan. 2010, at 16.57, Christian Herndler wrote:
> I get a lot of spam where the sender uses a whole /24 Subnet as mail
> relay, the helo uses the pattern
>
> mx{last-octet-of-ip}.domainname.net
>
> so it could be blocked using the check_spamhelo plugin, but to do that
> this plugin would need a small change as it only works with hostnames.
I've had a similar problem at the MAIL FROM level (right-hand side VERP, you
could say) and fixed this with this plugin:
http://github.com/tyskjohan/qpsmtpd/blob/master/plugins/check_badmailfrom_patterns
-Johan
