[Postfixbuch-users] Verbessertes Blocken von Spam-Mails anhand IP, DNS, DUL etc?

[Heiner Mueller]

Hallo,

> [...]
> Nur die RBLs lehnen eine Mail direkt mit REJECT ab. 
> Spamassassin/Mailscanner/Bayes können die angenommene Mail nur 
> nachträglich als Spam deklarieren, sollten sie aber trotzdem zustellen.

klar. Würden wenigstens Spamassassin etc. die Mails erkennen, würde es ja noch gehen. Aber aus irgendwelchen Gründen bekommen die zu niedrige Bewertungen (z.B. keine URI/nicht auf URI-Blacklist, Bayes zu niedrig/00, ...)

> Die Ausgabe von "postconf -n" würde helfen beim Helfen. (^-^)

haben ich mir auch gedacht (s.u.) ;-)


> ->	reject_invalid_hostname,
> ->	reject_non_fqdn_hostname,

in smptd_recipient_restrictions?

Ich will auf jeden Fall (naja muß nicht ganz 100% sein), verhindern, dass ich gewollte Mails/Clients blockiere.


Das Wichtigste meiner Config:

smtpd_recipient_restrictions =
        reject_unknown_sender_domain,
        reject_non_fqdn_sender,
        permit_mynetworks,
        permit_sasl_authenticated,
        reject_unauth_destination,
        check_sender_access btree:/etc/postfix/sender_access,
        check_recipient_access btree:/etc/postfix/recipient_access,
        reject_rbl_client ix.dnsbl.manitu.net,
        reject_rbl_client sbl-xbl.spamhaus.org,
        reject_rbl_client relays.ordb.org,
        reject_rhsbl_client blackhole.securitysage.com,
        reject_rhsbl_sender blackhole.securitysage.com,
        permit

header_checks = regexp:/etc/postfix/header_checks

---
und hier nochmal postconf -n:

alias_database = btree:/etc/aliases
alias_maps = btree:/etc/aliases
append_dot_mydomain = no
biff = no
bounce_queue_lifetime = 3d
broken_sasl_auth_clients = yes
config_directory = /etc/postfix
default_database_type = btree
delay_warning_time = 4h
disable_vrfy_command = yes
header_checks = regexp:/etc/postfix/header_checks
mailbox_size_limit = 0
maximal_queue_lifetime = 3d
message_size_limit = 32000000
mydestination = <meiner>, localhost
myhostname = <meiner>
mynetworks = 127.0.0.0/8
recipient_delimiter = +
relayhost =
smtp_sasl_auth_enable = no
smtpd_banner = $myhostname ESMTP
smtpd_enforce_tls = no
smtpd_helo_required = yes 
smtpd_recipient_restrictions = reject_unknown_sender_domain,    reject_non_fqdn_sender,         permit_mynetworks,      permit_sasl_authenticated,
        reject_unauth_destination,      check_sender_access btree:/etc/postfix/sender_access,   check_recipient_access btree:/etc/postfix/recipient_access,       reject_rbl_client ix.dnsbl.manitu.net,  reject_rbl_client sbl-xbl.spamhaus.org,         reject_rbl_client relays.ordb.org,      reject_rhsbl_client blackhole.securitysage.com,   reject_rhsbl_sender blackhole.securitysage.com,         permit
smtpd_sasl_application_name = smtpd
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain =
smtpd_sasl_security_options = noanonymous
smtpd_timeout = 300
smtpd_tls_auth_only = no
smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.crt
smtpd_tls_key_file = /etc/postfix/ssl/smtpd.key
smtpd_use_tls = yes
transport_maps = btree:/etc/postfix/transport
virtual_alias_maps = mysql:/etc/postfix/mysql_virtual_alias_maps.cf
virtual_gid_maps = static:1999
virtual_mailbox_base = /var/mail/virtual
virtual_mailbox_domains = mysql:/etc/postfix/mysql_virtual_domains_maps.cf
virtual_mailbox_maps = mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf
virtual_minimum_uid = 1999
virtual_transport = virtual
virtual_uid_maps = static:1999

---





-- 


Der GMX SmartSurfer hilft bis zu 70% Ihrer Onlinekosten zu sparen!
      Ideal für Modem und ISDN: http://www.gmx.net/de/go/smartsurfer