[Mimedefang] "Possible SMTP attack: command=HELO/EHLO, count=3"

[Jan-Pieter Cornet]

On Thu, Oct 26, 2006 at 03:18:10PM -0400, David F. Skoll wrote:
> > What do we get in $Helo?  Just the last one, I guess.
> 
> I think so... but I wonder if filter_helo gets invoked for each one?
> (Hey, there may actually be a use for that callback after all! :-))

According to my reading of the sendmail source: yes, every EHLO or
HELO command causes a milter call.

Haven't tested it, though.

-- 
Jan-Pieter Cornet <johnpc at xs4all.nl>
!! Disclamer: The addressee of this email is not the intended recipient. !!
!! This is only a test of the echelon and data retention systems. Please !!
!! archive this message indefinitely to allow verification of the logs.  !!