[Gross] Patch to Greylist Bad Helo

Rolf E. Sonneveld R.E.Sonneveld at sonnection.nl
Tue Oct 21 12:34:49 EEST 2008


Eino Tuominen wrote:
> Jeff Chan wrote:
>   
>> Hi,
>>
>>   For these few days, I went over the top and ran an experiement to
>> greylist senders with bad helo strings using grossd. I did this
>> because I found many obvious spams slipped through the RBLs undetected
>> (as trusted). Those were the ones with bad helo strings, either with
>> non-ascii characters, illegal domain name characters, non-fully
>> qualified hostnames, or with IP addresses whether bracketed or not.
>>     
>
> Hi Jeff,
>
> Sorry for a very late response...
>
> I have now incorporated your piece of code in the new check_helo.c in 
> svn version.
>
> This will be relased in version 1.1, which I plan to release next (with 
> the 1.0.2 patch release).
>   

Is this configurable?
What is the logic? I assume something like:

if (<IP address SMTP client> on DNSBL) or (we_greylist_everything turned on)
then
perform greylist action
else
if <bad helo/ehlo>
then
perform greylist action
else
OK
fi
fi

Or?

/rolf


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.utu.fi/pipermail/gross/attachments/20081021/8e74f782/attachment.html>


More information about the Gross mailing list