[quote]The TRANSFLT.MER file looks like this:
H, "*xxx.xxx.xxx.xxx*", R, "554 Action not allowed."
I'm not sure if you are giving an example of a specific IP address
here. One useful filter is to put your own IP address in here - nobody
else should be using your IP in a helo greeting.[/quote]
This is indeed my own IP address Paul.
[quote]H, "*GET*", R, "554 Action not allowed."
H, "*AUTH LOGIN*", R, "554 Action not allowed."
R, "*AUTH LOGIN*", R, "554 Action not allowed."
H, "*EHLO windows*", R, "554 Action not allowed."
These are unnecessary as all the examples you have shown have been
blocked by other means. (And the first might be harmful as it blocks
any helo with those three letters in it.)
These are the most useful lines I use:
# just a number
H,"HELO [0-9]+??", RS, "550 Invalid response"
# no dot
H,"*.*", RSN, "550 Invalid response"
The first rejects helos which just consist of digits, and the second rejects those with no dot in it.[/quote]
Thanks for that, I'll remove the last 4 lines and replace them with your useful ones instead. Still weighing up the pro's and con's of Graywall, now I know it's not 'serious' but more annoying and the bandwidth isn't suffering I feel a bit better about it.
Thanks again for taking the time to get back and advise Paul, much appreciated
Regards
Ron