>We already subscribe to MAPS's RBL database for known relay offenders. Our
>sendmail servers use that in a rule set for incoming mail. Is declude or
>IMgate the only way to apply a rule to incoming mail?
just about. Matthew Lohr does the same, I guess, in his "postfixgate"
>and if use IMgate,
>has anyone set that up to use an outside RBL database?
Of course, using MAPS was my primary motivation for doing IMGate two years ago.
I run these RBL's in my IMGate, others use a different list:
maps_rbl_domains = relays.ordb.org,
inputs.orbz.org,
bl.spamcop.net,
dialups.relays.osirusoft.com,
spews.relays.osirusoft.com
a RBL reject session looks like this:
==========================================================
Date: Tue, 12 Feb 2002 23:07:06 +0100 (CET)
From: [EMAIL PROTECTED] (Mail Delivery System)
To: [EMAIL PROTECTED] (Postmaster)
Subject: Postfix Relay Hub SMTP server: errors from unknown[195.6.224.133]
Message-Id: <[EMAIL PROTECTED]>
X-Virus-Scanned: by VirusGate.MEIway.com
X-UIDL: 300261866
Status: U
Transcript of session follows.
Out: 220 mgw1.MEIway.com - ESMTP - Postfix Relay Hub - ATTN: UCE trespassers
will be pursued.
In: HELO [195.6.224.133]
Out: 250 mgw1.MEIway.com
In: MAIL FROM:<[EMAIL PROTECTED]>
Out: 250 Ok
In: RCPT TO:<[EMAIL PROTECTED]>
Out: 554 Service unavailable; [195.6.224.133] blocked using relays.ordb.org,
reason: Blackholed by ORDB -- see
<http://ordb.org/lookup/?host=195.6.224.133>
In: QUIT
Out: 221 Bye
No message was collected successfully.
=========================================================
and today, co-incidentally, my IMGate got attacked by orbz:
=========================================================
Date: Tue, 12 Feb 2002 23:16:47 +0100 (CET)
From: [EMAIL PROTECTED] (Mail Delivery System)
To: [EMAIL PROTECTED] (Postmaster)
Subject: Postfix SMTP server: errors from sender.orbz.org[205.231.149.53]
Message-Id: <[EMAIL PROTECTED]>
X-Virus-Scanned: by VirusGate.MEIway.com
X-UIDL: 300261871
Status: U
Transcript of session follows.
Out: 220 ns2.MEIway.com - ESMTP - Postfix - ATTN: UCE trespassers will be
pursued.
In: HELO orbz.org
Out: 250 ns2.MEIway.com
In: MAIL FROM:<[EMAIL PROTECTED]>
Out: 250 Ok
In: RCPT TO:<[EMAIL PROTECTED]>
Out: 554 <[EMAIL PROTECTED]>: Recipient address rejected: Relay access denied
In: RSET
Out: 250 Ok
In: MAIL FROM:<bounce-pLfeMqg0>
Out: 250 Ok
In: RCPT TO:<[EMAIL PROTECTED]>
Out: 504 <bounce-pLfeMqg0>: Sender address rejected: need fully-qualified
address
In: RSET
Out: 250 Ok
In: MAIL FROM:<>
Out: 250 Ok
In: RCPT TO:<[EMAIL PROTECTED]>
Out: 554 <[EMAIL PROTECTED]>: Recipient address rejected: Relay access denied
In: RSET
Out: 250 Ok
In: MAIL FROM:<bounce-pLfeMqg0@localhost>
Out: 250 Ok
In: RCPT TO:<[EMAIL PROTECTED]>
Out: 504 <bounce-pLfeMqg0@localhost>: Sender address rejected: need
fully-qualified address
In: RSET
Out: 250 Ok
In: MAIL FROM:<bounce-pLfeMqg0@localhost>
Out: 250 Ok
In: RCPT TO:<relay%orbz.org@localhost>
Out: 504 <bounce-pLfeMqg0@localhost>: Sender address rejected: need
fully-qualified address
In: RSET
Out: 250 Ok
In: MAIL FROM:<bounce-pLfeMqg0@localhost>
Out: 250 Ok
In: RCPT TO:<"[EMAIL PROTECTED]">
Out: 504 <bounce-pLfeMqg0@localhost>: Sender address rejected: need
fully-qualified address
In: RSET
Out: 250 Ok
In: MAIL FROM:<bounce-pLfeMqg0@localhost>
Out: 250 Ok
In: RCPT TO:<"relay%orbz.org">
Out: 504 <bounce-pLfeMqg0@localhost>: Sender address rejected: need
fully-qualified address
In: RSET
Out: 250 Ok
In: MAIL FROM:<bounce-pLfeMqg0@localhost>
Out: 250 Ok
In: RCPT TO:<[EMAIL PROTECTED]@localhost>
Out: 504 <bounce-pLfeMqg0@localhost>: Sender address rejected: need
fully-qualified address
In: RSET
Out: 250 Ok
In: MAIL FROM:<bounce-pLfeMqg0@localhost>
Out: 250 Ok
In: RCPT TO:<"[EMAIL PROTECTED]"@localhost>
Out: 504 <bounce-pLfeMqg0@localhost>: Sender address rejected: need
fully-qualified address
In: RSET
Out: 250 Ok
In: MAIL FROM:<bounce-pLfeMqg0@localhost>
Out: 250 Ok
In: RCPT TO:<@localhost:[EMAIL PROTECTED]>
Out: 504 <bounce-pLfeMqg0@localhost>: Sender address rejected: need
fully-qualified address
In: RSET
Out: 250 Ok
In: MAIL FROM:<bounce-pLfeMqg0@localhost>
Out: 250 Ok
In: RCPT TO:<orbz.org!relay>
Out: 504 <bounce-pLfeMqg0@localhost>: Sender address rejected: need
fully-qualified address
In: RSET
Out: 250 Ok
In: MAIL FROM:<bounce-pLfeMqg0@localhost>
Out: 250 Ok
In: RCPT TO:<orbz.org!relay@localhost>
Out: 504 <bounce-pLfeMqg0@localhost>: Sender address rejected: need
fully-qualified address
In: RSET
Out: 250 Ok
In: MAIL FROM:<postmaster@localhost>
Out: 250 Ok
In: RCPT TO:<[EMAIL PROTECTED]>
Out: 504 <postmaster@localhost>: Sender address rejected: need
fully-qualified
address
In: RSET
Out: 250 Ok
In: MAIL FROM:<bounce-pLfeMqg0@[127.0.0.1]>
Out: 250 Ok
In: RCPT TO:<[EMAIL PROTECTED]>
Out: 554 <[EMAIL PROTECTED]>: Recipient address rejected: Relay access denied
In: RSET
Out: 250 Ok
In: MAIL FROM:<bounce-pLfeMqg0@[127.0.0.1]>
Out: 250 Ok
In: RCPT TO:<relay%orbz.org@[127.0.0.1]>
Out: 554 <relay%orbz.org@[127.0.0.1]>: Recipient address rejected: Relay
access denied
In: RSET
Out: 250 Ok
In: MAIL FROM:<bounce-pLfeMqg0@[127.0.0.1]>
Out: 250 Ok
In: RCPT TO:<"[EMAIL PROTECTED]">
Out: 554 <[EMAIL PROTECTED]>: Recipient address rejected: Relay access denied
In: RSET
Out: 250 Ok
In: MAIL FROM:<bounce-pLfeMqg0@[127.0.0.1]>
Out: 250 Ok
In: RCPT TO:<"relay%orbz.org">
Out: 504 <relay%orbz.org>: Recipient address rejected: need fully-qualified
address
Session aborted, reason: lost connection
==============================================
:))
Len
http://MenAndMice.com/DNS-training
http://BIND8NT.MEIway.com : ISC BIND 8.2.4 for NT4 & W2K
http://IMGate.MEIway.com : Build free, hi-perf, anti-abuse mail gateways
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
