Pattern-matching in HELO

7 msg	Invalid Sender Address syntax
2 msg	high availability
2 msg	BFD (Brute Force Detection) & Postfix
5 msg	relay domain and forwarding
2 msg	dk-milter - emal size issues
5 msg	Mail sent from local machine shows undisclosed-...
16 msg	Sorting incoming mails according to rules
5 msg	Correct use of smtpd_tls_security_level
1 msg	graph queue sizes
6 msg	large deferred queue ('too many connections')
3 msg	To see IP's
5 msg	How Can I Block certain IP's Within Range of my...
8 msg	Question about adding a special header to emails
3 msg	rcpt count mismatch and corrupt queue file ?
2 msg	too many connections
11 msg	Whitelist broken email servers?
4 msg	Write failed in network_biopair_interop with er...

Pattern-matching in HELO
\ Jeff Honey (15 Jun 2007)
. \ Noel Jones (15 Jun 2007)

3 msg	header_checks du jour
3 msg	Good Resource for additional Spam Blocking

Subject:	Pattern-matching in HELO
Group:	Postfix-users
From:	Jeff Honey
Date:	15 Jun 2007

I am working on matching some particular spam in a helo_check.

Where should I be looking to match? In the name the sending MTA provides or the one that is resolved in hard braces? Frequently they are two different things. Should I just try to match both? I apologize for being so clueless at the details of this stage of the SMTP conversation.

This is what I am trying to match...nothing too complicated:

(helo_checks file)
/spamliveshere\.net/ 550 (hc-011) your email contains invalid contents.
/technobabble/ 550 (hc-012) Go Away.

Here is a snippet of main.conf referencing aformentioned file:

(main.cf)
...
smtpd_recipient_restrictions =
check_helo_access regexp:/etc/postfix/maps/helo_checks,
...

I don't seem to be successful in just dropping things at HELO when the mail comes into postfix. Perhaps I am just trying to catch it too early or too late.

คคคคคคคคคคคคคคคคคคคคคคคคคคคคคคคคคคค
ค Jeff Honey, Network Administrator
ค PS America, Inc.
ค 4426 N. Orange Blossom Trl
ค Orlando, FL 32804
ค 407-521-1011 voice
ค 407-521-1007 fax
คคคคคคคคคคคคคคคคคคคคคคคคคคคคคคคคคคค