Re: EHLO/HELO [was blacklists]

2004-12-10 Thread Mark Bucciarelli
On Friday 10 December 2004 09:36, Mark Bucciarelli wrote: > (1) If SPF HELO checking is on and lookup matches connecting IP > --> PASS [..] > Otherwise, return 517 HELO $hostname does not match $remote-ip Sorry to reply to myself, but this sequence is more complicated if SPF checking is turned

Re: EHLO/HELO [was blacklists]

2004-12-10 Thread Mark Bucciarelli
[CC'ing Bill Taroli who has been helping me with this on courier-user] On Friday 10 December 2004 07:08, Russell Coker wrote: > On Friday 10 December 2004 00:39, Mark Bucciarelli > <[EMAIL PROTECTED]> > > wrote: > > I've recently turned on EHLO/HELO validation and am encouraged by how > > effectiv

Re: EHLO/HELO [was blacklists]

2004-12-10 Thread Craig Sanders
On Fri, Dec 10, 2004 at 11:08:53PM +1100, Russell Coker wrote: > I tried out "reject_unknown_hostname" but had to turn it off, too many > machines had unknown hostnames. > > For example a zone foo.com has a SMTP server named postfix1 and puts > postfix1.foo.com in the EHLO command but has an extern

Re: EHLO/HELO [was blacklists]

2004-12-10 Thread Russell Coker
On Friday 10 December 2004 00:39, Mark Bucciarelli <[EMAIL PROTECTED]> wrote: > I've recently turned on EHLO/HELO validation and am encouraged by how > effective it is. WIth RBL's (spamcop and dnsbl) and SpamAssassin 3, only > 88% of spam was stopped. So far, it's 100%. (This is a _very_ small

EHLO/HELO [was blacklists]

2004-12-09 Thread Mark Bucciarelli
On Tuesday 07 December 2004 17:55, Michael Loftis wrote: > --On Wednesday, December 08, 2004 08:47 +1100 Craig Sanders > > <[EMAIL PROTECTED]> wrote: > >> Now I reject by 554 code... should I change to 4xx? > > > > if it suits your needs. i wouldn't. > > I have to agree with that statement. For