>Sep 19 14:08:18 dns2 postfix/smtpd[11282]: CA860181245: reject: RCPT
>from burnia.dmz.health.nsw.gov.au[203.5.110.252]: 554 <[203.5.110.194]>:
>Helo command rejected: ACL helo_hostnames_regexp HELO/EHLO hostname must
>not contain an IP address, HELO = [203.5.110.194];
>from=<[EMAIL PROTECTED]> to=<[EMAIL PROTECTED]>
>proto=SMTP helo=<[203.5.110.194]>
></snip>

that's RFC correct.

I don't ever remember seeing that in 1000's I've looked at and in those, 
the vast majority of the time, they send the IMGate/MX's IP as their HELO, 
NOT their own IP.

>The helo name is an IP address enclosed by [ ] brackets.  If the RFC
>permits this then I have nothing to stand on except by doing what you
>suggested earlier, i.e.  whitelist them with DUNNO

no, DUNNO them on THIS restriction and keep checking other restrictions.

Whitelist is "OK them and NO more ensuing restrictions".

>  to skip the HELO
>check in order to enable other checks.  Am I right?

yep

Len


Reply via email to