Someone might find this useful, it tracks the most recent unique HELO names used per IP and the times they were last used - spam zombies become very obvious with this information.
http://simon.arlott.org/sw/exim/helo-cache/ -- Simon Arlott
signature.asc
Description: OpenPGP digital signature
-- ## List details at http://www.exim.org/mailman/listinfo/exim-dev Exim details at http://www.exim.org/ ##
