Re: rejecting clients greeting me with my own name

2010-10-06 Thread Jeroen Geilman
On 10/04/2010 10:55 PM, mouss wrote: Le 04/10/2010 21:10, Jeroen Geilman a écrit : On 10/04/2010 08:31 PM, Ralf Hildebrandt wrote: * Jeroen Geilman: The real client IP ? That can't be trivially spoofed, and so would actually BE your server. I have seen clients who apparently connect to my M

Re: rejecting clients greeting me with my own name

2010-10-04 Thread Stan Hoeppner
Jeroen Geilman put forth on 10/4/2010 2:10 PM: > The OP says in so many words that he sees connections WITH HIS IP: "who > apparently connect to the MX *with the IP*" > > This does not happen. Is this remotely plausible if he's behind a really funky NAT/masquerade? I've seen some junk quality N

Re: rejecting clients greeting me with my own name

2010-10-04 Thread mouss
Le 04/10/2010 21:10, Jeroen Geilman a écrit : On 10/04/2010 08:31 PM, Ralf Hildebrandt wrote: * Jeroen Geilman: The real client IP ? That can't be trivially spoofed, and so would actually BE your server. I have seen clients who apparently connect to my MX with the IP and then send the IP aft

Re: rejecting clients greeting me with my own name

2010-10-04 Thread mouss
Le 04/10/2010 17:49, martin f krafft a écrit : also sprach Noel Jones [2010.10.04.0507 +0200]: Lots easier to just use /^myhostname(\.mydomain)?$/ REJECT don't use my hostname Thanks to everyone who responded. I am now going the suggested way. However, it occurs to me that this is som

Re: rejecting clients greeting me with my own name

2010-10-04 Thread Jeroen Geilman
On 10/04/2010 08:31 PM, Ralf Hildebrandt wrote: * Jeroen Geilman: The real client IP ? That can't be trivially spoofed, and so would actually BE your server. I have seen clients who apparently connect to my MX with the IP and then send the IP after HELO. With YOUR IP ? T

Re: rejecting clients greeting me with my own name

2010-10-04 Thread fakessh
i hijacked the server with the null sender and the valid recipient the mail go home nb : hey madduck Le lundi 04 octobre 2010 à 20:44 +0200, martin f krafft a écrit : > also sprach Charles Marcus [2010.10.04.2029 > +0200]: > > > Yes, with my IP. > > > > So your server is hacked? > > I am tal

Re: rejecting clients greeting me with my own name

2010-10-04 Thread Wietse Venema
Ralf Hildebrandt: > > With YOUR IP ? That's highly unlikely, to the point of unbelievability. > > I've seen those as well; not from within my networks, but yes. I've > seen them! I see that all the time. For me, blocking helo with with $inet_interfaces/$myhostname is not sufficient, since Postfi

Re: rejecting clients greeting me with my own name

2010-10-04 Thread martin f krafft
also sprach Charles Marcus [2010.10.04.2029 +0200]: > > Yes, with my IP. > > So your server is hacked? I am talking about the argument to HELO/EHLO. No, my server is not hacked. -- martin | http://madduck.net/ | http://two.sentenc.es/ "if english was good enough for jesus christ, it's good

Re: rejecting clients greeting me with my own name

2010-10-04 Thread Ralf Hildebrandt
* Jeroen Geilman : > > Please don't send these redundant messages. It's a good indication of > your general messaging skills. > > > On 10/04/2010 07:56 PM, martin f krafft wrote: > >also sprach Jeroen Geilman [2010.10.04.1822 +0200]: > >>Where, exactly ? > >The HELO greeting. > > > >>The real c

Re: rejecting clients greeting me with my own name

2010-10-04 Thread Charles Marcus
On 2010-10-04 2:15 PM, martin f krafft wrote: >> With YOUR IP ? That's highly unlikely, to the point of unbelievability. > Yes, with my IP. So your server is hacked? -- Best regards, Charles

Re: rejecting clients greeting me with my own name

2010-10-04 Thread martin f krafft
also sprach Jeroen Geilman [2010.10.04.2004 +0200]: > >I have seen clients who apparently connect to my MX with the IP and > >then send the IP after HELO. > > With YOUR IP ? That's highly unlikely, to the point of unbelievability. Yes, with my IP. -- martin | http://madduck.net/ | http://two.s

Re: rejecting clients greeting me with my own name

2010-10-04 Thread Jeroen Geilman
Please don't send these redundant messages. It's a good indication of your general messaging skills. On 10/04/2010 07:56 PM, martin f krafft wrote: also sprach Jeroen Geilman [2010.10.04.1822 +0200]: Where, exactly ? The HELO greeting. The real client IP ? That can't be tr

Re: rejecting clients greeting me with my own name

2010-10-04 Thread martin f krafft
also sprach Jeroen Geilman [2010.10.04.1822 +0200]: > Where, exactly ? The HELO greeting. > The real client IP ? That can't be trivially spoofed, and so would > actually BE your server. I have seen clients who apparently connect to my MX with the IP and then send the IP after HELO. > Personall

Re: rejecting clients greeting me with my own name

2010-10-04 Thread Jeroen Geilman
On 10/04/2010 05:49 PM, martin f krafft wrote: also sprach Noel Jones [2010.10.04.0507 +0200]: Lots easier to just use /^myhostname(\.mydomain)?$/ REJECT don't use my hostname Thanks to everyone who responded. I am now going the suggested way. However, it occurs to me that th

Re: rejecting clients greeting me with my own name (was: static map returns 554, causing message to be accepted)

2010-10-04 Thread Jerry
On Mon, 4 Oct 2010 17:49:17 +0200 martin f krafft articulated: > also sprach Noel Jones [2010.10.04.0507 > +0200]: > > Lots easier to just use > > /^myhostname(\.mydomain)?$/ REJECT don't use my hostname > > Thanks to everyone who responded. I am now going the suggested way. > > However,

rejecting clients greeting me with my own name (was: static map returns 554, causing message to be accepted)

2010-10-04 Thread martin f krafft
also sprach Noel Jones [2010.10.04.0507 +0200]: > Lots easier to just use > /^myhostname(\.mydomain)?$/ REJECT don't use my hostname Thanks to everyone who responded. I am now going the suggested way. However, it occurs to me that this is something postfix could be trivially doing itself,