Roy Hooper
rhooper@cyberus.ca
Tue, 3 Sep 2002 10:18:46 -0400
> > From: Tim Wicinski <tim@meer.net> > > > ... > > env_From: <crypto-gram-return-54-tim=meer.net@chaparraltree.com> > > > > I was wondering if it would make more sense to use the 'HELO' field or > > the IP address (if it's a regular mailserver and not a chain of them). > > Those make sense, but the mail_host value found in the dccm log files > might be better. Wildcard or Regex whitelist options might help in this situation, or additional whitelist checks on the domain portions of env_From, env_To, and From... Roy