1 Topic by pixilla

  • pixilla
  • Member
  • Offline
  • Registered: 2017-08-02
  • Posts: 13

Topic: Can we move helo checks to miller

If we could move this check to milters couldn't we allow per domain helo whitelisting?

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,094

Re: Can we move helo checks to miller

- iRedMail doesn't use any Postfix milter yet.
- Do we really need per-domain HELO management?

3 Reply by iredmailtnt

  • iredmailtnt
  • Member
  • Offline
  • Registered: 2016-02-10
  • Posts: 52

Re: Can we move helo checks to miller

ZhangHuangbin wrote:

- iRedMail doesn't use any Postfix milter yet.
- Do we really need per-domain HELO management?

Kinda sorta yes, but if I understand the question correctly we already have it. There are numerous semi large companies that cannot seem to get helo correct. Rather than turn off all of the helo checks, we already have the following: In main.cf check_helo_access pcre:/etc/postfix/helo_wblist.pcre

And then I add something like the following:
/^NAM04-SN1-obe\.outbound\.protection\.outlook\.com/ OK

Yes, the above is real. that is what is so frustrating. Even MS cannot get this right. There is no A record for the above helo.

One of my customers complained that their customer's email to them was bouncing. At first I thought it was spoofed but when I asked if the mail was coming from office 365 I was told yes. The above is what I found in the logs.

Fortunately the exceptions are few.

Regards,

Tom