[Mimedefang] Re: Noting "may be forged" and IP-only HELO in filter_end

[David F. Skoll]

Dirk the Daring wrote:

>    I'm still interested in finding out if anyone knows of a low-cost way
> to pick up on sendmail's determination of "may be forged" as it
> eventually shows in the "Received: from" header.

Sendmail adds "may be forged" if the DNS lookup of the HELO name returns
one or more A records, and none of the A records matches the IP address
of the connecting client.  I don't know any cheaper way to obtain that
information than doing the same lookups yourself (with Net::DNS).

Regards,

David.