On 10/06/2003 at 17:21:20, Eric Yellin wrote:

> I have a known person being rejected by helo_hostnames.map because of a
> "spammer suspected" ehlo hostnames command: localhost.localdomain
> What does this mean? Why would they be using this command? What should I
> tell them to do to avoid the rejection?

> Here is the transcript:

> Out: 220 mx1.migvan.co.il - ESMTP - Postfix - Attn: UCE trespassers will be
>      pursued.
>  In:  EHLO localhost.localdomain

That EHLO command is the problem. It's supposed to be EHLO followed
by the full hostname of their server (eg mail.evron.co.il) or IP
address (eg [212.179.34.114]) instead of localhost.localdomain.

Fixing it should just be a simple change in their mail server's config
- right now that config file is calling their server
localhost.localdomain, when it should be a real hostname.

Alternatively you could whitelist their server in mta_clients_bw.map
or remove that check from helo_hostnames.map, but personally I'd ask
them to fix their system first.

Cheers,
Evan


Reply via email to