Thanks Len I think IMgate is the way I will go.
-----Original Message----- From: Len Conrad [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 12, 2002 4:31 PM To: [EMAIL PROTECTED] Subject: RE: [IMail Forum] Blacklisted relay servers >We already subscribe to MAPS's RBL database for known relay offenders. Our >sendmail servers use that in a rule set for incoming mail. Is declude or >IMgate the only way to apply a rule to incoming mail? just about. Matthew Lohr does the same, I guess, in his "postfixgate" >and if use IMgate, >has anyone set that up to use an outside RBL database? Of course, using MAPS was my primary motivation for doing IMGate two years ago. I run these RBL's in my IMGate, others use a different list: maps_rbl_domains = relays.ordb.org, inputs.orbz.org, bl.spamcop.net, dialups.relays.osirusoft.com, spews.relays.osirusoft.com a RBL reject session looks like this: ========================================================== Date: Tue, 12 Feb 2002 23:07:06 +0100 (CET) From: [EMAIL PROTECTED] (Mail Delivery System) To: [EMAIL PROTECTED] (Postmaster) Subject: Postfix Relay Hub SMTP server: errors from unknown[195.6.224.133] Message-Id: <[EMAIL PROTECTED]> X-Virus-Scanned: by VirusGate.MEIway.com X-UIDL: 300261866 Status: U Transcript of session follows. Out: 220 mgw1.MEIway.com - ESMTP - Postfix Relay Hub - ATTN: UCE trespassers will be pursued. In: HELO [195.6.224.133] Out: 250 mgw1.MEIway.com In: MAIL FROM:<[EMAIL PROTECTED]> Out: 250 Ok In: RCPT TO:<[EMAIL PROTECTED]> Out: 554 Service unavailable; [195.6.224.133] blocked using relays.ordb.org, reason: Blackholed by ORDB -- see <http://ordb.org/lookup/?host=195.6.224.133> In: QUIT Out: 221 Bye No message was collected successfully. ========================================================= and today, co-incidentally, my IMGate got attacked by orbz: ========================================================= Date: Tue, 12 Feb 2002 23:16:47 +0100 (CET) From: [EMAIL PROTECTED] (Mail Delivery System) To: [EMAIL PROTECTED] (Postmaster) Subject: Postfix SMTP server: errors from sender.orbz.org[205.231.149.53] Message-Id: <[EMAIL PROTECTED]> X-Virus-Scanned: by VirusGate.MEIway.com X-UIDL: 300261871 Status: U Transcript of session follows. Out: 220 ns2.MEIway.com - ESMTP - Postfix - ATTN: UCE trespassers will be pursued. In: HELO orbz.org Out: 250 ns2.MEIway.com In: MAIL FROM:<[EMAIL PROTECTED]> Out: 250 Ok In: RCPT TO:<[EMAIL PROTECTED]> Out: 554 <[EMAIL PROTECTED]>: Recipient address rejected: Relay access denied In: RSET Out: 250 Ok In: MAIL FROM:<bounce-pLfeMqg0> Out: 250 Ok In: RCPT TO:<[EMAIL PROTECTED]> Out: 504 <bounce-pLfeMqg0>: Sender address rejected: need fully-qualified address In: RSET Out: 250 Ok In: MAIL FROM:<> Out: 250 Ok In: RCPT TO:<[EMAIL PROTECTED]> Out: 554 <[EMAIL PROTECTED]>: Recipient address rejected: Relay access denied In: RSET Out: 250 Ok In: MAIL FROM:<bounce-pLfeMqg0@localhost> Out: 250 Ok In: RCPT TO:<[EMAIL PROTECTED]> Out: 504 <bounce-pLfeMqg0@localhost>: Sender address rejected: need fully-qualified address In: RSET Out: 250 Ok In: MAIL FROM:<bounce-pLfeMqg0@localhost> Out: 250 Ok In: RCPT TO:<relay%orbz.org@localhost> Out: 504 <bounce-pLfeMqg0@localhost>: Sender address rejected: need fully-qualified address In: RSET Out: 250 Ok In: MAIL FROM:<bounce-pLfeMqg0@localhost> Out: 250 Ok In: RCPT TO:<"[EMAIL PROTECTED]"> Out: 504 <bounce-pLfeMqg0@localhost>: Sender address rejected: need fully-qualified address In: RSET Out: 250 Ok In: MAIL FROM:<bounce-pLfeMqg0@localhost> Out: 250 Ok In: RCPT TO:<"relay%orbz.org"> Out: 504 <bounce-pLfeMqg0@localhost>: Sender address rejected: need fully-qualified address In: RSET Out: 250 Ok In: MAIL FROM:<bounce-pLfeMqg0@localhost> Out: 250 Ok In: RCPT TO:<[EMAIL PROTECTED]@localhost> Out: 504 <bounce-pLfeMqg0@localhost>: Sender address rejected: need fully-qualified address In: RSET Out: 250 Ok In: MAIL FROM:<bounce-pLfeMqg0@localhost> Out: 250 Ok In: RCPT TO:<"[EMAIL PROTECTED]"@localhost> Out: 504 <bounce-pLfeMqg0@localhost>: Sender address rejected: need fully-qualified address In: RSET Out: 250 Ok In: MAIL FROM:<bounce-pLfeMqg0@localhost> Out: 250 Ok In: RCPT TO:<@localhost:[EMAIL PROTECTED]> Out: 504 <bounce-pLfeMqg0@localhost>: Sender address rejected: need fully-qualified address In: RSET Out: 250 Ok In: MAIL FROM:<bounce-pLfeMqg0@localhost> Out: 250 Ok In: RCPT TO:<orbz.org!relay> Out: 504 <bounce-pLfeMqg0@localhost>: Sender address rejected: need fully-qualified address In: RSET Out: 250 Ok In: MAIL FROM:<bounce-pLfeMqg0@localhost> Out: 250 Ok In: RCPT TO:<orbz.org!relay@localhost> Out: 504 <bounce-pLfeMqg0@localhost>: Sender address rejected: need fully-qualified address In: RSET Out: 250 Ok In: MAIL FROM:<postmaster@localhost> Out: 250 Ok In: RCPT TO:<[EMAIL PROTECTED]> Out: 504 <postmaster@localhost>: Sender address rejected: need fully-qualified address In: RSET Out: 250 Ok In: MAIL FROM:<bounce-pLfeMqg0@[127.0.0.1]> Out: 250 Ok In: RCPT TO:<[EMAIL PROTECTED]> Out: 554 <[EMAIL PROTECTED]>: Recipient address rejected: Relay access denied In: RSET Out: 250 Ok In: MAIL FROM:<bounce-pLfeMqg0@[127.0.0.1]> Out: 250 Ok In: RCPT TO:<relay%orbz.org@[127.0.0.1]> Out: 554 <relay%orbz.org@[127.0.0.1]>: Recipient address rejected: Relay access denied In: RSET Out: 250 Ok In: MAIL FROM:<bounce-pLfeMqg0@[127.0.0.1]> Out: 250 Ok In: RCPT TO:<"[EMAIL PROTECTED]"> Out: 554 <[EMAIL PROTECTED]>: Recipient address rejected: Relay access denied In: RSET Out: 250 Ok In: MAIL FROM:<bounce-pLfeMqg0@[127.0.0.1]> Out: 250 Ok In: RCPT TO:<"relay%orbz.org"> Out: 504 <relay%orbz.org>: Recipient address rejected: need fully-qualified address Session aborted, reason: lost connection ============================================== :)) Len http://MenAndMice.com/DNS-training http://BIND8NT.MEIway.com : ISC BIND 8.2.4 for NT4 & W2K http://IMGate.MEIway.com : Build free, hi-perf, anti-abuse mail gateways Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
