Which ACLs to use

Hi folks,

I'm looking for some opinions on which ACLs to use.  For example, I would
like to reject connections when the sender tries to forge my IP address in
the HELO/EHLO statement.  I would have figured the best place to do this would
be in the acl_smtp_helo ACL.  I did some research and most examples I found
were in not in the acl_smtp_helo ACL.

Would it not be a good idea to do sender verification in the acl_smtp_mail
ACL?

Is it generally better to do as many 'rejections' as possible in the
acl_smtp_rcpt ACL b/ most MTAs will handle that better?  Is there any other
reason, except for compatiblity with dumb MTAs, to not make use of the other
ACLs?

Thanks for your $0.02,
mikeS

-- 
Michael Sprague  | [email protected]
Partner          | System and Network Engineering (SaNE), LLC
use STD::disclaimer;