Having recently been battling to keep some servers out of the CBL, I decided it was time to get strict on what the email servers were accepting, so I created an Exim ACL to reject non-RFC2821 compliant HELO/EHLO strings.