[Gross] Patch to Greylist Bad Helo
Rolf E. Sonneveld
R.E.Sonneveld at sonnection.nl
Tue Oct 21 12:34:49 EEST 2008
Eino Tuominen wrote:
> Jeff Chan wrote:
>
>> Hi,
>>
>> For these few days, I went over the top and ran an experiement to
>> greylist senders with bad helo strings using grossd. I did this
>> because I found many obvious spams slipped through the RBLs undetected
>> (as trusted). Those were the ones with bad helo strings, either with
>> non-ascii characters, illegal domain name characters, non-fully
>> qualified hostnames, or with IP addresses whether bracketed or not.
>>
>
> Hi Jeff,
>
> Sorry for a very late response...
>
> I have now incorporated your piece of code in the new check_helo.c in
> svn version.
>
> This will be relased in version 1.1, which I plan to release next (with
> the 1.0.2 patch release).
>
Is this configurable?
What is the logic? I assume something like:
if (<IP address SMTP client> on DNSBL) or (we_greylist_everything turned on)
then
perform greylist action
else
if <bad helo/ehlo>
then
perform greylist action
else
OK
fi
fi
Or?
/rolf
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.utu.fi/pipermail/gross/attachments/20081021/8e74f782/attachment.html>
More information about the Gross
mailing list