[Mimedefang] Not piggybacking HELO checks

[Steffen Kaiser]

On Tue, 10 Jan 2006, Philip Prindeville wrote:

> Here's why:  certain sites that don't get a lot of external mail but do
> need to be "open" to the outside all the same (and no email addresses on
> these machines are published in any way to the outside world) have
> open security, i.e. they will answer a "EXPN" or "VRFY".

Dunno, but EXPN you can nail down via sendmail:

# Hide EXPN command for non-locals
Scheck_expn
R$*                     $: $&{client_addr}
R127.0.0.1      $@ OK
R194.95.66.3    $@ OK
R$*                     $#error $@ 5.5.1 $: "502 Command not implemented"

Bye,

-- 
Steffen Kaiser