[Mimedefang] "Possible SMTP attack: command=HELO/EHLO, count=3"

[David F. Skoll]

Joseph Brennan wrote:

> What do we get in $Helo?  Just the last one, I guess.

I think so... but I wonder if filter_helo gets invoked for each one?
(Hey, there may actually be a use for that callback after all! :-))

Regards,

David.