[Mimedefang] Re: Noting "may be forged" and IP-only HELO in filter_end
David F. Skoll
dfs at roaringpenguin.com
Sun Mar 12 18:42:48 EST 2006
Dirk the Daring wrote:
> I'm still interested in finding out if anyone knows of a low-cost way
> to pick up on sendmail's determination of "may be forged" as it
> eventually shows in the "Received: from" header.
Sendmail adds "may be forged" if the DNS lookup of the HELO name returns
one or more A records, and none of the A records matches the IP address
of the connecting client. I don't know any cheaper way to obtain that
information than doing the same lookups yourself (with Net::DNS).
More information about the MIMEDefang