+ ## Check that the caller's claimed identity is actually plausible.
+ ## This seems like it's a fairly effective filter on spamminess, but
+ ## it's too blunt a tool. Rather than reject, add a warning header.
+ ## Only we can't do this the easy way, so save it up for use in MAIL.
+ ## Also, we're liable to get a subsequent HELO (e.g., after STARTTLS)
+ ## and we should only care about the most recent one.
+ warn set acl_c_helo_warning = false
+ !condition = \
+ ${if and {{match_ip {$sender_host_address} \
+ {<; 127.0.0.0/8 ; ::1}} \
+ {match_domain {$sender_helo_name} \
+ {localhost : +thishost}}}}
+ !condition = \
+ ${if exists {CONF_sysconf_dir/helo.conf} \
+ {${lookup {$sender_helo_name} \
+ partial0-lsearch \
+ {CONF_sysconf_dir/helo.conf} \
+ {${if match_ip \
+ {$sender_host_address} \
+ {<; $value}}}}}}
+ !verify = helo
+ set acl_c_helo_warning = true
+
+ accept
+
+SECTION(global, acl)m4_dnl
+acl_not_smtp_start = not_smtp_start
+SECTION(acl, misc)m4_dnl
+not_smtp_start:
+ ## Record the user's name.
+ warn set acl_c_user = $sender_ident