Hi Andrew,

If I do:

> HELO  1 NOTCONTAINS .
> 
> cc-2.example.local

Then the example will pass my HELO filter test since it has a . in it.
It will fail HELOBOGUS though.
 
 
 
     Goran Jovanovic
     The LAN Shoppe

 

> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Colbeck, Andrew
> Sent: Thursday, February 10, 2005 2:31 PM
> To: Declude.JunkMail@declude.com
> Subject: RE: [Declude.JunkMail] FW: Is there a variable for this
> 
> Yes, that's the HELO variable.
> 
> Your configuration should already be triggering HELOBOGUS on the
sample
> you provided; if you want to be particular about the problem you
> specified
> 
> HELO  1 NOTCONTAINS .
> 
> would do the trick.  You will probably penalize as much spam as ham
this
> way, though.  Lots of mailservers are set up without conforming to the
> best practices we wish everyone would, so you'll see just a hostname,
> like cc-2, or an internal hostname from an Exchange server or an
Active
> Directory server fully qualified domain name, like cc-2.example.local
> 
> Andrew 8)
> 
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Goran
Jovanovic
> Sent: Thursday, February 10, 2005 11:15 AM
> To: Declude.JunkMail@declude.com
> Subject: [Declude.JunkMail] FW: Is there a variable for this
> 
> 
> Reposting
> 
> 
> 
> 
>      Goran Jovanovic
>      The LAN Shoppe
> 
> 
> -----Original Message-----
> From: Goran Jovanovic
> Sent: Thursday, February 10, 2005 12:01 AM
> To: 'Declude.JunkMail@declude.com'
> Subject: Is there a variable for this
> 
> Hi,
> 
> Is there a variable for:
> 
> Received: from cc-2 [216.132.135.170] by .........
> 
> The cc-2 in this case. This is the mail server that last touched it.
> 
> I was wondering if it would be a good idea to query the cc-2 and
assign
> it points if it did not have a "." in it. It is supposed to be a
proper
> name. I have noticed some spam (line this one) comes from
> servers/workstations that are not configured correctly.
> 
> 
> 
>      Goran Jovanovic
>      The LAN Shoppe
> ---
> [This E-mail was scanned for viruses by Declude Virus
> (http://www.declude.com)]
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
> "unsubscribe Declude.JunkMail".  The archives can be found at
> http://www.mail-archive.com.
> ---
> [This E-mail was scanned for viruses by Declude Virus
> (http://www.declude.com)]
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to