Ok this is what I was responding to. You are correct you did not say that but [] are valid in the HELO string if they are in the form of a well formed IP. We have a few customers that send mail with the HELO being a wellformed IP.
> In this case I think it is good enough to consider it spam. It is not an RFC compliant helo hostname, and only a spammer is going to include something > > like brackets "[]" and greater-than/less-than "<>" symbols in their hostname. That's good enough for me to reject delivery on. To me it's no different > that a spammer trying to send me mail and using my server's hostname or IP address as their own helo hostname - I reject these outright. Kevin Bilbee > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Bill Landry > Sent: Wednesday, October 20, 2004 6:26 PM > To: [EMAIL PROTECTED] > Subject: Re: [Declude.JunkMail] Random Helo strings > > > ----- Original Message ----- > From: "Kevin Bilbee" <[EMAIL PROTECTED]> > > > I was replying to your comment that you block helo strings > thar are ip > > addresses. Look at your previous post. > > Nope, never said that and have never done that. The only > exception, like I said, is if the connecting mail server > announces itself with my own IP address, then I reject with a > "550, don't use my IP address". > > Bill > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be > found at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
