Francisco Yepes Candel <[EMAIL PROTECTED]> writes:

> 1. reject all the messages with origin (dirIP) AND destination (rcpt) out
> of my domain

This is done by allowing your IP addresses to connect (via a rule in
/etc/hosts.allow, tcpserver, or whatever you use to run qmail-smtpd --
I use NetBSD's inetd, which does tcpwrapper stuff internally)

> 2. reject all the messages with a envelope sender "unqualified" (without
> domain)

I have code that does this, I think.

> 3. reject all the messages with a envelope sender "unresolvable" (in
> DNS)

I know I have code that does this.

> 4. accept the rest

I go a little further.

I check the MAPS RBL and MAPS DUL (see http://maps.vix.com/rbl/ and
http://maps.vix.com/dul/ for info) to see if the incoming IP address
is on either of those lists.  For the RBL, mail is rejected.  For the
DUL, a X-Spam-Warning: line is added to let users figgure out what
they might want to do with it.

I also do regular expression matching on header lines.

See http://www.flame.org/qmail/ for info.  (I'll be updating this in a
few minutes, it'll be SLIGHTLY out of date until then.)

--Michael

Reply via email to