What is Google Analytics and How to Use It?
15.04.2022
To block connections coming as EHLO or HELO ylmf-pc, we can put a block on HELO; for this, a short rule needs to be written in exim.
If you are using cPanel, go to the Exim Configuration Manager section, enter the Advanced Editor section, and search for the custom_begin_smtp_helo line.
Enter the following rule in the text field below;
drop
condition = ${lookup{$sender_helo_name}lsearch{/etc/heloblocks}{yes}{no}}
log_message = HELO/EHLO - HELO on heloblocks Blocklist
message = HELO on heloblocks Blocklist
accept
Then open a file named /etc/heloblocks on your server, write ylmf-pc inside it, and restart exim.
This will block spam connections coming as ylmf-pc when they attempt to connect to the server.
Using this method, you can also block spam connections with a fixed HELO connection name by adding them line by line to the /etc/heloblocks file.
The rule generally blocks the connection based on the device name of the entity sending the mail connection request.
After the operation, the log of incoming requests will be as follows.
H=(ylmf-pc) [IP ADDRESS]:PORT rejected EHLO or HELO ylmf-pc: HELO/EHLO - HELO on heloblocks Blocklist
Leave a Comment
* Your comment will be published after approval.
Comments
0No comments yet. Be the first to comment!