I'm kind of new at this too, but I think you need to wildlsearch or 
nwildlsearch.  See section 9.3 of the online manual:

http://www.exim.org/exim-html-4.66/doc/html/spec_html/ch09.html#SECTsinglekeylookups

Hope this helps.



Sent by:        [EMAIL PROTECTED]
To:     [email protected]
cc:      (bcc: Dan Mitton/YD/RWDOE)
Subject:        [exim] Reject on helo
LSN: Not Relevant
User Filed as: Not a Record

I am trying to reject a delivery based on the sender's helo name.  I 
get many concurrent connections where the helo consistently has the 
same format (displaying a domain name for instance). So, I am 
guessing these are mass mailing systems that don't bother altering 
the helo.

I have smtp_accept_max_per_host = 5 to limit connections from the 
same IP and still they insist by getting a different IP and using up 
their five connections. Can`t see how this can be anything other than 
spam. I could restrict the IP at acl connect but want to be less 
strict in this case, so I set up a deny at acl helo as follows:

#       deny    message       = Your email has been rejected probably 
because your domain has been sending spam.
#       log_message   = HELO in reject_helo list
#       condition     = ${lookup {$sender_helo_name} \
#                               lsearch{/etc/exim/reject_helo} \
#                               {yes}{no}}

where /etc/exim/reject_helo contains, one per line: *baddomain1.com 
*baddomain2.com, etc.

however, when I run a mock smtp connection with, for instance exim - 
bh 192.168.11.22 and do EHLO baddomain1.com, I get

 >>> deny: condition test failed
 >>> processing "deny"
 >>> check condition = ${lookup {$sender_helo_name} lsearch{/etc/exim/ 
reject_helo} {yes}{no}}
 >>>                 = no
 >>> deny: condition test failed

Is the condition set up properly, or am I approaching the issue in a 
wrong way?

Thanks for the help.



-- 
## List details at http://www.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://www.exim.org/eximwiki/


-- 
## List details at http://www.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://www.exim.org/eximwiki/

Reply via email to