I have:

smtpd_helo_required = yes
smtpd_helo_restrictions = reject_invalid_helo_hostname,
                          reject_non_fqdn_helo_hostname,
                          reject_unknown_helo_hostname

So I was very surprised recently when I started getting spam accepted
that looks like it is giving a non routable literal IP HELO and it isn't
being rejected.  How is this getting past the invalid and non fqdn helo
checks?  Also it looks like it skipped MAIL FROM.  Isn't there a
restriction to block that?

Return-Path: <>
X-Original-To: [email protected]
Delivered-To: [email protected]
Received-SPF: None (no SPF record) identity=helo; client-ip=34.13.156.68; 
helo=[10.88.0.4]; envelope-from=<>; receiver=thesusis.net 
Received: from [10.88.0.4] (68.156.13.34.bc.googleusercontent.com 
[34.13.156.68])
        by vps.thesusis.net (Postfix) with ESMTP id ED88881E32
        for <[email protected]>; Mon,  7 Apr 2025 09:52:55 -0400 (EDT)
_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to