Re: [exim] A riddle: What HELO/EHLO does remote host send?

2007-02-28 Thread Matthew Byng-Maddick
On Fri, Feb 02, 2007 at 09:55:01AM -0800, [EMAIL PROTECTED] wrote: > But doesn't a 'drop' also close the connection? You will never get t the > RCPT. [catching up slowly] No. If you don't send a HELO or EHLO, you'll get to the smtp_rcpt_acl without ever having hit the smtp_helo_acl, so you stil

Re: [exim] A riddle: What HELO/EHLO does remote host send?

2007-02-04 Thread Andrew - Supernews
> "Marc" == Marc Haber <[EMAIL PROTECTED]> writes: >> (4) A selection of names, eg "localhost.localdomain". Marc> During a period of time, newly installed Debian systems had Marc> their /etc/hosts misconfigured in a way that an installed exim Marc> 4 would HELO as localhost.localdomain. I

Re: [exim] A riddle: What HELO/EHLO does remote host send?

2007-02-03 Thread Renaud Allard
Marc Haber wrote: > On Sat, 3 Feb 2007 17:56:59 + (GMT), Jethro R Binks > <[EMAIL PROTECTED]> wrote: >> On Sat, 3 Feb 2007, Marc Haber wrote: >>> On Fri, 2 Feb 2007 13:14:27 + (GMT), Dennis Davis >>> <[EMAIL PROTECTED]> wrote: (4) A selection of names, eg "localhost.localdomain". >>>

Re: [exim] A riddle: What HELO/EHLO does remote host send?

2007-02-03 Thread Jethro R Binks
On Sat, 3 Feb 2007, Marc Haber wrote: > On Sat, 3 Feb 2007 17:56:59 + (GMT), Jethro R Binks > <[EMAIL PROTECTED]> wrote: > >On Sat, 3 Feb 2007, Marc Haber wrote: > >> On Fri, 2 Feb 2007 13:14:27 + (GMT), Dennis Davis > >> <[EMAIL PROTECTED]> wrote: > >> >(4) A selection of names, eg "local

Re: [exim] A riddle: What HELO/EHLO does remote host send?

2007-02-03 Thread Marc Haber
On Sat, 3 Feb 2007 17:56:59 + (GMT), Jethro R Binks <[EMAIL PROTECTED]> wrote: >On Sat, 3 Feb 2007, Marc Haber wrote: >> On Fri, 2 Feb 2007 13:14:27 + (GMT), Dennis Davis >> <[EMAIL PROTECTED]> wrote: >> >(4) A selection of names, eg "localhost.localdomain". >> >> During a period of time,

Re: [exim] A riddle: What HELO/EHLO does remote host send?

2007-02-03 Thread Jethro R Binks
On Sat, 3 Feb 2007, Marc Haber wrote: > On Fri, 2 Feb 2007 13:14:27 + (GMT), Dennis Davis > <[EMAIL PROTECTED]> wrote: > >(4) A selection of names, eg "localhost.localdomain". > > During a period of time, newly installed Debian systems had their > /etc/hosts misconfigured in a way that an in

Re: [exim] A riddle: What HELO/EHLO does remote host send?

2007-02-03 Thread Marc Haber
On Fri, 2 Feb 2007 13:14:27 + (GMT), Dennis Davis <[EMAIL PROTECTED]> wrote: >(4) A selection of names, eg "localhost.localdomain". During a period of time, newly installed Debian systems had their /etc/hosts misconfigured in a way that an installed exim 4 would HELO as localhost.localdomain.

Re: [exim] A riddle: What HELO/EHLO does remote host send?

2007-02-02 Thread Wakko Warner
bject: Re: [exim] A riddle: What HELO/EHLO does remote host send? > LSN: Not Relevant > User Filed as: Not a Record > > Alexander Shikoff wrote: > > Thanks a lot! I've understood: some spammers ignore 550 code at HELO > stage. > > I've made additional

Re: [exim] A riddle: What HELO/EHLO does remote host send?

2007-02-02 Thread Dan_Mitton
But doesn't a 'drop' also close the connection? You will never get t the RCPT. Sent by:[EMAIL PROTECTED] To: Exim users mailing list cc: (bcc: Dan Mitton/YD/RWDOE) Subject: Re: [exim] A riddle: What HELO/EHLO does remote host send? LSN: Not Relevant Use

Re: [exim] A riddle: What HELO/EHLO does remote host send?

2007-02-02 Thread Wakko Warner
Alexander Shikoff wrote: > Thanks a lot! I've understood: some spammers ignore 550 code at HELO stage. > I've made additional check in RCPT ACL. You could enforce the use of helo at mail time. Do your deny at helo time, then deny at mail time if helo is blank. -- Lab tests show that use of mic

Re: [exim] A riddle: What HELO/EHLO does remote host send?

2007-02-02 Thread Wakko Warner
Peter Bowyer wrote: > On 02/02/07, Alexander Shikoff <[EMAIL PROTECTED]> wrote: > > Hello, > > > > To discover some strange issue I've put some additional logging into HELO > > and RCPT ACLs: > > > > acl_check_helo: > >deny > ># reject IP-addresses IN HELO/EHLO > >

Re: [exim] A riddle: What HELO/EHLO does remote host send?

2007-02-02 Thread Dennis Davis
On Fri, 2 Feb 2007, Peter Bowyer wrote: > From: Peter Bowyer <[EMAIL PROTECTED]> > To: Exim users mailing list > Date: Fri, 2 Feb 2007 12:45:51 + > Subject: Re: [exim] A riddle: What HELO/EHLO does remote host send? ... > Since your HELO ACL rejected the HELO, and t

Re: [exim] A riddle: What HELO/EHLO does remote host send?

2007-02-02 Thread Alexander Shikoff
On Fri, Feb 02, 2007 at 12:45:51PM +, Peter Bowyer wrote: > On 02/02/07, Alexander Shikoff <[EMAIL PROTECTED]> wrote: > > Hello, > > > > To discover some strange issue I've put some additional logging into HELO > > and RCPT ACLs: > > > > acl_check_helo: > >deny > ># reje

Re: [exim] A riddle: What HELO/EHLO does remote host send?

2007-02-02 Thread Peter Bowyer
On 02/02/07, Peter Bowyer <[EMAIL PROTECTED]> wrote: > It sent 201.250.194.147. Typo of course. 201.250.198.147 -- Peter Bowyer Email: [EMAIL PROTECTED] -- ## List details at http://www.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with t

Re: [exim] A riddle: What HELO/EHLO does remote host send?

2007-02-02 Thread Peter Bowyer
On 02/02/07, Alexander Shikoff <[EMAIL PROTECTED]> wrote: > Hello, > > To discover some strange issue I've put some additional logging into HELO > and RCPT ACLs: > > acl_check_helo: >deny ># reject IP-addresses IN HELO/EHLO >message = Bad HELO/EHLO >

Re: [exim] A riddle: What HELO/EHLO does remote host send?

2007-02-02 Thread W B Hacker
Alexander Shikoff wrote: > Hello, > > To discover some strange issue I've put some additional logging into HELO > and RCPT ACLs: > > acl_check_helo: > deny > # reject IP-addresses IN HELO/EHLO > message = Bad HELO/EHLO > condition = > ${lookup

[exim] A riddle: What HELO/EHLO does remote host send?

2007-02-02 Thread Alexander Shikoff
Hello, To discover some strange issue I've put some additional logging into HELO and RCPT ACLs: acl_check_helo: deny # reject IP-addresses IN HELO/EHLO message = Bad HELO/EHLO condition = ${lookup{$sender_helo_name}nwildlsearch{BL_BAD_HELO