Leonardo Rodrigues Magalhães wrote: > > Jan 2 10:18:35 topserver2 policyd: invalid triplet_array[11][5]: > (blacklist helo): > Jan 2 10:18:35 topserver2 policyd: invalid triplet_array[11][5]: > (blacklist helo): > Jan 2 10:19:10 topserver2 policyd: invalid triplet_array[12][5]: > (blacklist helo): > Jan 2 10:19:10 topserver2 policyd: invalid triplet_array[12][5]: > (blacklist helo): > > Seems that it's cause by a helo string filled with interrogation > marks ... i dont know if that's the real helo sent by client or it's > some translation done by postfix and passed to policyd ... > > Enabled DEBUG=2 and got (just lines i think it's relevant) > > Jan 2 10:20:10 topserver2 policyd: DEBUG: fd: 9 > policy_array[9][0]:request=smtpd_access_policy > Jan 2 10:20:10 topserver2 policyd: DEBUG: fd: 9 > policy_array[9][5]:helo_name=?????? > Jan 2 10:20:10 topserver2 policyd: invalid triplet_array[9][5]: > (blacklist helo): > > Jan 2 10:20:10 topserver2 postfix/smtpd[3094]: NOQUEUE: reject: RCPT > from unknown[124.46.177.150]: 450 <[EMAIL PROTECTED]>: Recipient > address rejected: Policy Rejection- Invalid data; > from=<trucker'[EMAIL PROTECTED]> to=<[EMAIL PROTECTED]> > proto=ESMTP helo=<??????> > > That's an 'Invalid Data' error ..... that's not the usual for > greylist rejections, which would be: Please try later, greylisting in > action. > > Watching the logs closely, it seems to me that all occurences of > this helo=<?????> were from connections that are SPAM messages. I havent > seen this happening on 'good' connections. Thus, this isnt generating a > real problem, altough it's logging a problem situation.
The content provided by the HELO string sent by the spammer is in some type of binary or 7/8bit. Policyd will only accept acsii chars and strip out everything else which is not legal (according to Policyd). You shouldn't have any issues with it. Cami ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ policyd-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/policyd-users
