forum.lissyara.su

Код: Выделить всё

  # Рубаем у кого 4 точки в HELO
  deny message = "$sender_helo_name - a lot of dots in the name(more than 4)"
        condition = ${if match{$sender_helo_name}{\N((?>\w+[\.]){4,})\N}{yes}{no}}
        hosts = !+relay_from_hosts : !localhost : !127.0.0.1/8 : *
        logwrite = "HELO=$sender_helo_name - more dots in name"

Код: Выделить всё

##  accept  local_parts   = postmaster
##          domains       = +local_domains

Код: Выделить всё

Received: from dovecot by host.rumex.ru with spam-scanned (Exim 4.66)
	(envelope-from <info@aldo.com>)
	id 1HdUIN-000I40-Ma
	for postmaster@dorc.ru; Mon, 16 Apr 2007 20:43:15 +0400
Received: from [77.193.241.87] (helo=87.241.193-77.rev.gaoland.net)
	by host.rumex.ru with smtp (Exim 4.66)
	(envelope-from <info@aldo.com>)
	id 1HdUIL-000I3u-Br
	for postmaster@DORC.ru; Mon, 16 Apr 2007 20:43:14 +0400
Message-ID: <028901c7803a$f60c53d0$1f330e0a@chaplin>
From: "Kvartet I" <info@aldo.com>
To: <postmaster@DORC.ru>

Код: Выделить всё

lissyara$ pcretest
PCRE version 7.0 18-Dec-2006

  re> /((?>\w+[\.]){4,})/
data> 87.241.193-77.rev.gaoland.net
No match
data> w87.241.193-77.rev.gaoland.net
No match
data> a.a.a.a.a.a
 0: a.a.a.a.a.
 1: a.a.a.a.a.
data> a.a.a.a.a
 0: a.a.a.a.
 1: a.a.a.a.
data> 1.2.3.4.5
 0: 1.2.3.4.
 1: 1.2.3.4.
data> 87.241.193-77
No match
data> 87.241.193-77.rev.
No match
data> 87.241.193-77.rev.gaoland.net
No match
data> 1.2.3.4.a.5
 0: 1.2.3.4.a.
 1: 1.2.3.4.a.
data> 1.2.3-4.a.a
No match
data> 1.2.34.a.a
 0: 1.2.34.a.
 1: 1.2.34.a.
data>                                        

Код: Выделить всё

Apr 17 12:26:27 host exim[1293]: H=(p1099-ipbfp403fukuokachu.fukuoka.ocn.ne.jp) [125.170.226.99] I=[84.21.70.195]:25 F=<mthompsn@deltastate.edu> rejected RCPT <info@dorc.ru>: "p1099-ipbfp403fukuokachu.fukuoka.ocn.ne.jp - a lot of dots in the name(more than 4)"
Apr 17 12:26:27 host exim[1293]: H=(p1099-ipbfp403fukuokachu.fukuoka.ocn.ne.jp) [125.170.226.99] I=[84.21.70.195]:25 F=<mthompsn@deltastate.edu> rejected RCPT <info@dorc.ru>: "p1099-ipbfp403fukuokachu.fukuoka.ocn.ne.jp - a lot of dots in the name(more than 4)"