> 1) That the IP address of the connecting server is in the list of IPs
> returned by DNS A and MX RR of the name given in HELO/EHLO.

FWIW it is hard to get sendmail to put in the address of the interface
on which the email is beig sent.  The address of its main interface
may not be in a publically visible DNS (eg if it is a 192.168.x.x address)
Doing so (look at the headers for this mail) means that the systems
actual name is completely absent.

Checking for the MX record (ie requiring that the outbound mail gateway
is the same is the inward one) will surely lead to incorrect bounces.

	David

-- 
David Laight: david@l8s.co.uk