[Mimedefang] Non-routable addresses in HELO

[Kayne Kruse]

On Sun, 2006-07-09 at 22:40 -0400, Dirk the Daring wrote:
>    I've noticed some SPAMmers recently starting to HELO using
> non-routable 
> IP addresses (mostly 10.x.x.x or 192.168.x.x)
> 
>      I'm thinking of filtering for this, and I came up with this code
> (which 
> would be placed AFTER the check for an IP-based HELO in square
> brackets - 
> so any IP-based HELO missing the brackets has already been rejected). 

If your seeing drive by spammers, I honestly would be looking at
implementing greylisting instead.  Most of my spam experience has shown
that a vast majority is coming from IP addresses that do not get used
that often.  

My $0.02

Kayne