EHLO identification
Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5897
Printed Date: 05 February 2025 at 12:59pm
Topic: EHLO identification
Posted By: AlexSoya
Subject: EHLO identification
Date Posted: 04 December 2006 at 12:08pm
|
How do I set the argument to EHLO to the server name I want to use. At this point EHLO simply identifies itself as the primary machine name, but not as the DNS entry for the IP addressed used.
Thanks -alex
------------- Alex |
Replies:
Posted By: LogSat
Date Posted: 04 December 2006 at 7:27pm
|
Under the "Settings - Configuration" tab, the entry for the "FQDN" is the Fully Qualified Domain Name that will be used in the welcome banner SpamFilter will send to the connecting servers. The domain in the EHLO command that SpamFilter uses when forwarding emails to your destination SMTP server is fixed to the primary machine name. Strange that in the last 4 years nobody noticed this! You have a very valid observation, and we will be adjusting this to match the FQDN in the welcome banner in the next release. ------------- Roberto Franceschetti http://www.logsat.com" rel="nofollow - LogSat Software http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP |
Posted By: AlexSoya
Date Posted: 04 December 2006 at 7:33pm
|
Great. Yeah, my destination server is set up to verify RDNS on the EHLO message, and so I got a bunch of warnings whenever SpamFilter sent a message to it. Overall I really like your product! However, I have some severe performance issues. I'm running it on a dedicated Windows 2000 server at this time, whenever SpamFilter is active, the system acts very very slow in the Gui. Any tips for increasing performance would be welcome. We are receiving about 40-80 connections PER SECOND, and 99.9% of it is SPAM. Now you see why I NEED a great product like SpamFilter!
------------- Alex |
Posted By: Marcus
Date Posted: 04 December 2006 at 9:06pm
Personally in this situation I would be denying anyaccess of anytype at the firewall level on some subnets. Marcus |
AlexSoya wrote:Posted By: LogSat
Date Posted: 04 December 2006 at 11:15pm
|
Alex, If you have 40-80 concurrent connections at anytime, that will generate a lot of events in the activity log. If SpamFilter's *GUI* is slow, it's possible that your video card is not able to handle the amount of scrolling that occurs in the "Activity Log" and/or "Connections" tabs in SpamFilter. Try to de-activating both displays (with the "Enable Activity Log" checkbox on the ActivityLog tab, and the "Disable Conns Grid" checkbox on the Settings-Configuration tab). If you receive in the order of a few millions emails/day, we'd recommend disabling the Bayesian filter as well, as it requires a lot of resources and is not that effective/accurate in high traffic installations. Bayesian filters were "ok" to use a few years ago, but nowdays spammers can easily word emails to go around them. ------------- Roberto Franceschetti http://www.logsat.com" rel="nofollow - LogSat Software http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP |
Posted By: caratking
Date Posted: 03 January 2007 at 5:14am
|
I did a search today for EHLO to see about this issue today, and came to this thread. Has this feature been implemented to the EHLO states the FQDN? My server still seems to report the windows machine name when connecting. |
Posted By: LogSat
Date Posted: 04 January 2007 at 11:03pm
|
caratking, We're adding that option to the new SpamFilter 3.5 release. There's a beta version available in the registered user area, and it will be another month or so before it is released officially. ------------- Roberto Franceschetti http://www.logsat.com" rel="nofollow - LogSat Software http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP |