Allow customizing access-helo REJECTs

roles/mail/defaults/main.yml

@@ -54,6 +54,9 @@ mail_blacklist_senders: []
 # Recipients that will be blacklisted
 mail_blacklist_recipients: []
 
+# HELO hosts to be blocked
+mail_blacklist_helo: []
+
 # Clean up TxRep entries older than this
 txrep_cleanup_days: 30
 

roles/mail/templates/postfix-in/access-helo

 # Cutwail botnet
 ylmf-pc REJECT
+{% for helo in mail_blacklist_helo %}
+{{ helo }} REJECT
+{% endfor %}