It is available in the pre-data filter... 1st line of the @@file... data before first ";"
The "ClientDomain" is the HELO sent to XMail. I use it in my antispam filter for XMail for Windows (I write mine in .NET) ------------------------------------------------------------ Jason J Ellingson 615.301.1682 : nashville 612.605.1132 : minneapolis www.ellingson.com [EMAIL PROTECTED] -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brett Sent: Tuesday, April 05, 2005 6:05 PM To: XMail List Subject: [xmail] HELO from who? This is probably old news to many but... "mydomain.com" "mydomain.com" "SOM.IP.ADD.RES" "MY.IP.ADD.RES" "[EMAIL PROTECTED]" "[EMAIL PROTECTED]" blah blah According to the logfile description, the 'HELO servername' from the other email server is saying "HELO MY.IP.ADD.RES" which of course shouldn't be. And of course I would like kill the connection as early as possible. I get about 200 of these a day. About 150 are blocked by the Spam lists. About 50 get through - many get killed by later scripts but I still get about 5 or 10 anyway. I didn't see anyway to get the HELO for a filter. I am forced to run XMail 1.21 on a Vinders Machine 8-) and can't go playing with the source. Any ideas? Brett - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED] - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
