Re: [Ext]HELO controls in CommuniGate
"Jeff Wark" <[email protected]> Thu, 07 Jul 2016 16:35:33 -0400
| Newsgroups | gmane.mail.cgatepro.general |
|---|---|
| Message-ID | <[email protected]> |
And with a helper, you have to receive the message first, instead of rejecting the message at the HELO/EHLO step. -- Jeff Wark Tbaytel Internet On Thu, 07 Jul 2016 16:09:09 -0400 "Mark J Strawcutter" <[email protected]> wrote: >> >> You should be able to check/reject/drop using a rule >> >> Mark >> >> ----- Reply message ----- >>From: "Jeff Wark" <[email protected]> >> To: "CommuniGate Pro Discussions" <[email protected]> >> Subject: [Ext]HELO controls in CommuniGate >> Date: Thu, Jul 7, 2016 11:35 AM >> >> Just read an article that outlined some patterns that were detectable >> in spambot HELO/EHLO commands. >> As an example, looking at my logs show dozens of IP addresses connecting >> with 'EHLO ylmf-pc'. >> >> Does anyone know of a method that allows for restricting the HELO strings in >> CommuniGate? It appears that Postfix has something called 'HELO controls'. This would be an interesting feature. >> >> I'm thinking that there isn't because I am unaware of any options providing control at that point of the SMTP >> connection. The only thing I can think of is watching the logs and generating a list for blacklisting/denying IP addresses. >> >> >> -- >> >> >> Jeff Wark >> Tbaytel Internet >> >> ############################################################# >> >> This message is sent to you because you are subscribed to >> >> the mailing list <[email protected]>. >> >> To unsubscribe, E-mail to: <[email protected]> >> >> To switch to the DIGEST mode, E-mail to <[email protected]> >> >> To switch to the INDEX mode, E-mail to <[email protected]> >> >> Send administrative queries to <[email protected]> >> ############################################################# This message is sent to you because you are subscribed to the mailing list <[email protected]>. To unsubscribe, E-mail to: <[email protected]> To switch to the DIGEST mode, E-mail to <[email protected]> To switch to the INDEX mode, E-mail to <[email protected]> Send administrative queries to <[email protected]>