On 20 May 2005 at 12:37, Dickenson, Steven wrote about
    "RE: [exim] Bogus HELOs":

| Jakob Hirsch wrote:
| > I treat EHLO data as totally meaningless, so I don't care about it.
| > After all, I don't want to lose mail because of such a thing.
| 
| I agree with you, for the most part.  However, I do feel it's worthwhile
| to reject mail from servers that HELO/EHLO with my own name.

And even more worthwhile if they HELO with your own IP address.  
About 2/3 of my spoofed server rejections are for my public IP 
address (sent as a domain name, not in IP literal notation), only 
about 1/3 use one of my server names.

| Over the
| last year I've never had a false positive on this.

ISTM false positives are not possible, by definition.  The only case 
I can imagine is a misconfigured road warrior or telecomuter machine, 
and I'll happily deal with that if it arises.

- Fred





-- 
## List details at http://www.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://www.exim.org/eximwiki/

Reply via email to