Gerald wrote:
> In Postfix, if I want to reject based on certain dnsbl hits prior to
> injecting into Amavis I do it in master.cf, right? Like this:
> smtp inet n - - - - smtpd
> -o receive_override_options=no_address_mappings
> -o smtpd_sender_restrictions=reject_unknown_sender_domain
> -o smtpd_client_restrictions=permit_mynetworks,
> reject_rbl_client sbl-xbl.spamhaus.org,
> reject_rbl_client bl.spamcop.net,
> reject_rbl_client dul.dnsbl.sorbs.net,
> reject_rbl_client dynablock.njabl.org
> -o smtpd_recipient_restrictions=permit_mynetworks,
> permit_sasl_authenticated,
> reject_unauth_destination,
> Gerald
Unless I am misunderstanding what you are trying to accomplish, and I
am not a Postfix expert by any means, but I think most people would
instead do something like this in main.cf:
smtpd_recipient_restrictions=
reject_unknown_sender_domain,
permit_mynetworks,
permit_sasl_authenticated,
reject_unauth_destination,
reject_rbl_client sbl-xbl.spamhaus.org,
reject_rbl_client bl.spamcop.net,
reject_rbl_client dul.dnsbl.sorbs.net,
reject_rbl_client dynablock.njabl.org
That way, 'postconf -n' would be more informative.
Also, it is common to place restrictions that would normally go into
prior restriction stages (like smtpd_sender_restrictions) into
smtpd_recipient_restrictions in the proper order.
http://jimsun.linxnet.com/misc/postfix-anti-UCE.txt
http://www.securitysage.com/antispam/maincf.html
are two good references.
Gary V
-------------------------------------------------------
This SF.Net email is sponsored by Oracle Space Sweepstakes
Want to be the first software developer in space?
Enter now for the Oracle Space Sweepstakes!
http://ads.osdn.com/?ad_id=7412&alloc_id=16344&op=click
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
