On Tue, 27 Sep 2005, Herb Martin wrote:

>  Do most people think that accepting _underscore is
>    useful approach?  Trouble?

In general, lack of technical prowess is not correlated with evil. Many
legitimate sites have broken DNS, so it's generally best to give people a
break for using underscores in hostnames.

There are plenty of other things that turn up in HELO hostnames which
*are* an accurate indicator of evil behaviour.

  deny
    message        = Please use your name when saying HELO (not 
$sender_helo_name)
    condition      = ${if or{{ eq{$ACL_HELO}{bad} } \
                             { eq{$sender_helo_name}{$local_part} } \
                             { match{$sender_helo_name}{^[0-9.-]+\$} } \
                             { match{$sender_helo_name}{\N[.][.]|.{55}\N} } \
                             { match_domain{$sender_helo_name}{+our_domains} }} 
}
    set ACL_HELO   = bad

Tony.
-- 
<[EMAIL PROTECTED]>   <[EMAIL PROTECTED]>   http://dotat.at/   ${sg{\N${sg{\
N\}{([^N]*)(.)(.)(.*)}{\$1\$3\$2\$1\$3\n\$2\$3\$4\$3\n\$3\$2\$4}}\
\N}{([^N]*)(.)(.)(.*)}{\$1\$3\$2\$1\$3\n\$2\$3\$4\$3\n\$3\$2\$4}}

-- 
## List details at http://www.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://www.exim.org/eximwiki/

Reply via email to