Back in the day ... I'd be inclined to not accept mail from something HELOing with an IP literal where the connecting IP was not on our local network.
An excuse can be made for a mail client. An actual mail server doing this doesn't belong on the Internet until they buy a clue. IMHO only, of course. Aloha, Michael. -- Michael J Wise Microsoft Corporation| Spam Analysis "Your Spam Specimen Has Been Processed." Got the Junk Mail Reporting Tool ? -----Original Message----- From: mailop <mailop-boun...@mailop.org> On Behalf Of Brielle Bruns Sent: Monday, June 11, 2018 1:28 PM To: mailop <mailop@mailop.org> Subject: [mailop] HELO *.* Been seeing an awful lot of these lately on one of my email servers (exim based): 2018-06-11 14:15:44 no host name found for IP address 157.25.104.90 2018-06-11 14:15:47 rejected HELO from [157.25.104.90]: syntactically invalid argument(s): *.* 2018-06-11 14:21:42 no host name found for IP address 185.221.172.140 2018-06-11 14:21:43 rejected HELO from [185.221.172.140]: syntactically invalid argument(s): *.* Anyone know if this is some sort of exploit or just the sign of a specific type of spambot? -- Brielle Bruns The Summit Open Source Development Group https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.sosdg.org&data=02%7C01%7Cmichael.wise%40microsoft.com%7C6c1e72c8ac0c425470f208d5cfdb0279%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636643461903613377&sdata=W1u8ZacQ0ewi%2BdhRQsJ3m2Q%2BxyrSpIT10PF7SW2cRJc%3D&reserved=0 / https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.ahbl.org&data=02%7C01%7Cmichael.wise%40microsoft.com%7C6c1e72c8ac0c425470f208d5cfdb0279%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636643461903613377&sdata=siKjMqZfU23hb1CKR7SjBVlcXg6WlQmR%2B5eHtsQGKwo%3D&reserved=0 _______________________________________________ mailop mailing list mailop@mailop.org https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fchilli.nosignal.org%2Fcgi-bin%2Fmailman%2Flistinfo%2Fmailop&data=02%7C01%7Cmichael.wise%40microsoft.com%7C6c1e72c8ac0c425470f208d5cfdb0279%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636643461903613377&sdata=Rqn4G8JP7FZBvmJS7SUOYUMIQ4eyP%2FzcOXFitIcSI1U%3D&reserved=0 _______________________________________________ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
