[milters] Archive

Lists Index Date Thread Search

Article: 1220
From: Ken A
Date: 2006-11-01 19:18:16 -0500
Subject: possible SMTP attack: command=HELO/EHLO, count=3

Removal...........: milters-request@milter.info?subject=remove
More information..: http://www.milter.info/#Support
--------------------------------------------------------

Is there any way to quickly block these using an existing milter?

possible SMTP attack: command=HELO/EHLO, count=3

I know greylisting works, since these are from malfunctioning botnets, 
but I'm hoping to be able to simply reject based on the HELO containing 
'|', which these do, and which isn't a valid char for a hostname.

Using latest sendmail.

Thanks,
Ken A.
Pacific.Net

Lists Index Date Thread Search