On Mon, Dec 08, 2003 at 07:49:21AM +0700, Beny Lawu wrote:
> Mohon bantunannya dari rekan-rekan postfix, Untuk POstfix,
> spam tools apa yang cocok, apakah spamassasin bisa digunakan
> dan gimana cara konfigurasinya, terima kasih.
Menggunakan SA memang bisa, tapi setelah email di masukkan ke queue
Postfix tentunya :-). Jika anda ingin memerangi spam di level SMTP
anda bisa menggunakan kombinasi mumble_recipient_restriction yang ada,
at least bisa mengurangi.
Diserver saya konfigurasinya seperti ini :
smtpd_recipient_restrictions =
permit_mynetworks
reject_invalid_hostname
reject_non_fqdn_recipient
reject_non_fqdn_sender
reject_unknown_recipient_domain
reject_unknown_sender_domain
reject_unauth_pipelining
reject_non_fqdn_hostname
reject_unauth_destination
check_client_access hash:/etc/postfix/maps/client_checks
check_sender_access hash:/etc/postfix/maps/sender_access
check_helo_access hash:/etc/postfix/maps/helo_access
reject_rbl_client cbl.abuseat.org
reject_rbl_client bl.spamcop.net
reject_rbl_client dul.dnsbl.sorbs.net
reject_rbl_client list.dsbl.org
reject_rbl_client sbl.spamhaus.org
reject_rbl_client dnsbl.njabl.org
reject_rbl_client ipwhois.rfc-ignorant.org
reject_rhsbl_sender dsn.rfc-ignorant.org
check_recipient_access hash:/etc/postfix/maps/recipient_access
permit
Dialup/ADSL dan konco-konconya:
/etc/postfix/maps/client_checks
aol.com REJECT
t-dialin.net REJECT
uninet.net.mx REJECT
telia.com REJECT
hinet.net REJECT
attbi.com REJECT
surewest.net REJECT
comcast.net REJECT
videotron.ca REJECT
telus.net REJECT
pacbell.net REJECT
rr.com REJECT
chello.nl REJECT
optonline.net REJECT
verizon.net REJECT
dsl-verizon.net REJECT
wanadoo.nl REJECT
cox.net REJECT
bellsouth.net REJECT
skynet.be REJECT
prodigy.net.mx REJECT
Karena email dari @aol.com dan @msn.com ke server saya adalah spam
semuanya:
/etc/postfix/maps/sender_access
aol.com REJECT Too many spammer from this domain.
msn.com REJECT Too many spammer from this domain.
/etc/postfix/maps/helo_access
202.145.6.95 REJECT You're not 202.145.6.95
202.145.6.96 REJECT You're not 202.145.6.96
Kalau restriksi diatas tidak ada yang match, baru dimasukkan ke
content filtering (SA dengan Amavis):
/etc/postfix/maps/recipient_access
cakraweb.com FILTER smtp-amavis:[127.0.0.1]:10024
Mungkin untuk mailserver skala kecil (seperti ditempat saya) ini sudah
overkill, yo wis ben. Kata pak Wietse: Spam is war, RFCs doesn't apply
:-)
Asfihani
