Renaud Allard via mailop <mailop@mailop.org> wrote: > On 04/19/2016 09:15 AM, Michelle Sullivan wrote: > > > > As well... ;-) (and for those that don't get it... the host issued 'HELO > > [65.55.234.213]' or 'EHLO [65.55.234.213]' .. perfectly legal but > > something malware and bots do as well.. > > While HELOing like this that might be perfectly "legal", this is > something which is probably going to be blocked as well by many/most > servers.
I tried blocking HELO domain literals briefly in 2009 but the false positive rate was way too high. On the other hand, ^[0-9.-]+$ has been an effective and safe reason to block for many years. Tony. -- f.anthony.n.finch <d...@dotat.at> http://dotat.at/ - I xn--zr8h punycode Humber, Thames: Northwest, veering north or northeast, 4 or 5. Slight or moderate. Fair. Good. _______________________________________________ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
