> > Just to mention two examples, well, the point is that in a lot of spam > emails the HELO is the same for a lot of different email addresses, so, I > am trying to block that. > > Is there a better way than checking all the header? > > @ Christian Grunfeld > > > > a blacklist lookup table can achieve the same, cant it? > > Can you share how to create this lookup table in a rule? > > Thanks a lot for your inputs. > > Sergio >
not a lookup table in a rule but a table of "blacklist_from" in local.cf or wherever
