[Mimedefang] $helo versus $ip

Lucas Albers admin at cs.montana.edu
Tue Feb 3 03:42:22 EST 2004


Chris Myers said:
> You can get a lot of false positives with strong HELO checking.
>
> Chris Myers
> Networks By Design
I implemented a modification of this on a low load site.
Too many fp's for a site with any mail diversity or signifigant mail load.
spamassassin already does these sort of checks.
You can generally reject on machines that just give you single hostname
component.
Assuming you do not accept mail from email clients.
Read the archives and test this with logging before rejecting if you still
feel the urge to do this.
I only get 30-100 per day on this.

-- 
Luke Computer Science System Administrator
Security Administrator,College of Engineering
Montana State University-Bozeman,Montana



More information about the MIMEDefang mailing list