>The "$domain" is a dead giveaway as regards spoofing.
Yep, reject with no qualms.
My little ACL file for HELO hostnames contains:
$domain 554 ACL helo_hostnames
localhost 554 ACL helo_hostnames
localhost.localdomain 554 ACL helo_hostnames
localdomain 554 ACL helo_hostnames
... gives rejcts for today, so far:
314 ACL helo_hostnames
... which is about the same qty of rejects as my KLEZ count for body filtering.
Can do the same for
MAIL FROM: [EMAIL PROTECTED]
Len
__________________________________________________________________
www.menandmice.com/DNS-training : DNS Training
BIND8NT.MEIway.com : ISC BIND for NT4 & W2K
IMGate.MEIway.com : Build free, hi-perf, anti-abuse mail gateways
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
