Re: A Quickhack

Hadmut Danisch wrote:
> 
> As a disrespectful consequence of my last posting about the difference
> between authentication and authorization:
> 
> We could cover the hole EHLO/HELO story by simply giving out this
> recommendation:
> 
>   When receiving a EHLO/HELO command, do an A query to the
>   given parameter and abort if the response does not match
>   the IP address.
> 
> That's it, gentlemen, it's as simple.

That does not tell you if the  host is authorized to relay mail. But an
MTA might want to do that in addition to a DRIP check.


Raymond S Brand