I still have that problem with the sender that used a spammy microsoft server that gets rejected by IP for using spamcop. I put the domain in the client_checks file but the sender gets bounced.
postconf mail_version mail_version = 3.8.1 compatibility_level = 2 The client_checks line was added. smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination, reject_unauth_pipelining, reject_non_fqdn_sender, reject_unknown_sender_domain, reject_unknown_recipient_domain, reject_non_fqdn_recipient, check_client_access hash:/etc/postfix/client_checks, check_sender_access hash:/etc/postfix/sender_checks, check_client_access hash:/etc/postfix/rbl_override, reject_rbl_client bl.spamcop.net, check_policy_service unix:private/policy This is the contents of client_checks: cat client_checks idontspam.com OK A simple check to verify the postmap worked: sh-4.2# ls -l client_check* -rw-r--r-- 1 root root 19 Feb 25 03:03 client_checks -rw-r--r-- 1 root root 12288 Feb 25 03:06 client_checks.db ****** This is an actual spammer being rejected: Feb 25 23:10:03 MYDOMAIN postfix/smtpd[19121]: connect from mail-co1nam11on2108.outbound.protection.outlook.com[40.107.220.108] Feb 25 23:10:03 MYDOMAIN postfix/smtpd[19121]: Anonymous TLS connection established from mail-co1nam11on2108.outbound.protection.outlook.com[40.107.220.108]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits) Feb 25 23:10:03 MYDOMAIN postfix/smtpd[19121]: NOQUEUE: reject: RCPT from mail-co1nam11on2108.outbound.protection.outlook.com[40.107.220.108]: 554 5.7.1 Service unavailable; Client host [40.107.220.108] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?40.107.220.108; from=<christianter...@x0g8eqb.onmicrosoft.com> to=<m...@mydomain.com> proto=ESMTP helo=<NAM11-CO1-obe.outbound.protection.outlook.com> Feb 25 23:10:03 MYDOMAIN postfix/smtpd[19121]: using backwards-compatible default setting smtpd_relay_before_recipient_restrictions=no to reject recipient "m...@mydomain.com" from client "mail-co1nam11on2108.outbound.protection.outlook.com[40.107.220.108]" Feb 25 23:10:04 MYDOMAIN postfix/smtpd[19121]: disconnect from mail-co1nam11on2108.outbound.protection.outlook.com[40.107.220.108] ehlo=2 starttls=1 mail=1 rcpt=0/1 quit=1 commands=5/6 ****** ****** This is email from the sender that appears on the client_check file Feb 27 03:55:55 MYDOMAIN postfix/smtpd[31397]: connect from mail-dm6nam10on2125.outbound.protection.outlook.com[40.107.93.125] Feb 27 03:55:55 MYDOMAIN postfix/smtpd[31397]: Anonymous TLS connection established from mail-dm6nam10on2125.outbound.protection.outlook.com[40.107.93.125]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits) Feb 27 03:55:55 MYDOMAIN postfix/smtpd[31397]: NOQUEUE: reject: RCPT from mail-dm6nam10on2125.outbound.protection.outlook.com[40.107.93.125]: 554 5.7.1 Service unavailable; Client host [40.107.93.125] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?40.107.93.125; from=<notaspam...@idontspam.com> to=<m...@mydomain.com> proto=ESMTP helo=<NAM10-DM6-obe.outbound.protection.outlook.com> Feb 27 03:55:55 MYDOMAIN postfix/smtpd[31397]: using backwards-compatible default setting smtpd_relay_before_recipient_restrictions=no to reject recipient "m...@mydomain.com" from client "mail-dm6nam10on2125.outbound.protection.outlook.com[40.107.93.125]" Feb 27 03:55:55 MYDOMAIN postfix/smtpd[31397]: disconnect from mail-dm6nam10on2125.outbound.protection.outlook.com[40.107.93.125] ehlo=2 starttls=1 mail=1 rcpt=0/1 quit=1 commands=5/6 Feb 27 03:57:47 ******** _______________________________________________ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org
