[Postfixbuch-users] smtpd_recipient_restrictions

[arne110]

Guten Tag Herr Fürstenberg,

danke das Sie hierzu mir etwas mehr Informationen mit gegeben haben.

> reject_invalid_hostname heißt seit Postfix 2.3
> "reject_invalid_helo_hostname" 

Das hatte ich überlesen. Danke.

Ich habe nun anhand Ihrer möglichen Konfigurationshilfe folgende Konfig
vorliegen:

## POSTFIX main.cf ##

alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
append_dot_mydomain = no
biff = no
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = amavis:[127.0.0.1]:10024
daemon_directory = /usr/lib/postfix
header_checks = regexp:/etc/postfix/header_checks
html_directory = no
inet_interfaces = all
local_recipient_maps =
local_transport = error:local mail delivery is disabled
mail_owner = postfix
mailbox_size_limit = 0
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
message_size_limit = 40960000
mime_header_checks = pcre:/etc/postfix/body_checks
mydestination = my-exchange.domain, domain.de
myhostname = proxy-server.domain
mynetworks = 127.0.0.0/8, 192.168.xxx.0/24, 192.168.xxx.0/24
mynetworks_style = host
myorigin = $myhostname
newaliases_path = /usr/bin/newaliases
queue_directory = /var/spool/postfix
readme_directory = no
recipient_delimiter = +
relay_domains = $mydestination
sample_directory = /etc/postfix
sendmail_path = /usr/sbin/sendmail
setgid_group = postdrop
smtpd_banner = $myhostname ESMTP $mail_name ($mail_version)
smtpd_client_restrictions =
smtpd_helo_required = yes
smtpd_helo_restrictions =
smtpd_recipient_restrictions = reject_invalid_helo_hostname,
reject_non_fqdn_hostname, reject_non_fqdn_sender, reject_non_fqdn_recipient,
reject_unknown_sender_domain, reject_unknown_recipient_domain,
reject_unauth_pipelining, permit_mynetworks, reject_unauth_destination,
reject_rbl_client ix.dnsbl.manitu.net, reject_rbl_client
zombie.dnsbl.sorbs.net, reject_rbl_client bl.spamcop.net, reject_rbl_client
cbl.abuseat.org, reject_rbl_client sbl.spamhaus.org, permit
soft_bounce = yes
strict_rfc821_envelopes = yes
transport_maps = hash:/etc/postfix/transport
unknown_local_recipient_reject_code = 550
## END ##

Bisher sehe ich noch keine Probleme in meinen Logs.

Habe noch gelesen das man unknown_$(sender|recipient)_reject_code = 550
verwenden kann um eine erneute Anfrage zu unterbinden, damit der Client
mitbekommt das seine Anfrage abgewiesen wurde.

Ist das so notwendig, bzw. ebenfalls zu empfehlen. Im Moment sehe ich
bsplw.:

Jun  4 09:14:47 proxy-server postfix/cleanup[15402]: CA56B80038: reject:
header Content-Disposition: attachment; filename=Bat_To_Exe_Converter.exe
from mout.gmx.de[212.xxx.xxx.xxx]; from=<username at gmx.de>
to=<user.name at firmen.domain.de> proto=ESMTP helo=<mout.gmx.de>: 5.7.1
attachment type not allowed

Diese wiederholen sich bis X-Mal. Kann man das damit reduzieren?

VG, Arne110



--
View this message in context: http://postfix.1071664.n5.nabble.com/smtpd-recipient-restrictions-tp68320p68365.html
Sent from the Germany Postfixbuch mailing list archive at Nabble.com.