-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Wed, 2015-10-21 at 09:22 -0700, Spam Auditor wrote: > Is that really the IP Address?
Yes, all of these attempts used EHLO [real.ip.address] > There is no PTR record associated with > that IP Address, and I would start with that. No one should allow > connections from IP(s) with no rDNS configured to port 25. Well, sendmail allows the *connection*; the test for missing rdns comes later, but these folks did not even get that far. The malformed MAIL FROM caused sendmail to reject the rest of their commands. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.14 (GNU/Linux) iEYEARECAAYFAlYnvy0ACgkQL6j7milTFsGRGQCfRqCH2a4fLt94omEY+EhiqNO8 j3EAn0VhzD3ONJF1ltT6ai4NaJmBg8Ds =zN2i -----END PGP SIGNATURE----- _______________________________________________ mailop mailing list mailop@mailop.org http://chilli.nosignal.org/mailman/listinfo/mailop
