Re: [postfix-users] Reject email palsu
- Original Message - From: "Asfihani" <[EMAIL PROTECTED]> To: Sent: Wednesday, September 07, 2005 1:03 PM Subject: Re: [postfix-users] Reject email palsu Dadang Haryadi wrote: Saya terapkan greylist sesuai petunjuk mas asfik di http://www.mail-archive.com/postfix-users@postfix.or.id/msg00731.html namunsetelah saya cek lognya ada pesan postfix/smtpd[26890]: warning: unknown smtpd restriction: "greylist" Yang dipake itu smtpd_restriction_classes = greylist Yang betul yang ini Pak thanks koreksinya, btw kok ngga langsung pakai policydnya Cami yang sudah native pakai (R)DBMS saja pak? Testing? kalo saya ngikutin ini, ko jadi error ya? fatal: restriction class `greylist' needs a definition Tetapi jika saya menggunakan ini bisa. smtpd_recipient_restrictions = check_policy_servce unix:private/policy Salam, Angky
Re: [postfix-users] Reject email palsu
Dadang Haryadi wrote: Iya nich saya juga baru implementasi greylisting jadi masih harus banyak belajar. Btw file $database_name="/var/mta/greylist.db ini dibuat manual apa otomatis, soalnya sekarang aku cek log maillnya. Otomatis postfix/smtpd[28853]: starting TLS engine Sep 7 13:05:44 ns1 postfix/smtpd[28853]: connect from web51115.mail.yahoo.com[206.190.39.92] Sep 7 13:05:58 ns1 postfix/smtpd[28853]: warning: connect to private/policy: No such file or directory Sep 7 13:05:59 ns1 postfix/smtpd[28853]: warning: connect to private/policy: No such file or directory Sep 7 13:05:59 ns1 postfix/smtpd[28853]: warning: problem talking to server private/policy: No such file or directory Pastikan direktori /var/mta/ dimiliki oleh user nobody dan entry policy ada di master.cf (sudah ditambah?). Asfihani
RE: [postfix-users] Reject email palsu
Oh yang ini yach, entar dech aku cobain http://www.gasmi.net/gld.html http://wyae.de/docs/greylisting_on_debian.php Salam Dadang -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Asfihani Sent: Wednesday, September 07, 2005 1:16 PM To: postfix-users@postfix.or.id Subject: Re: [postfix-users] Reject email palsu Asfihani wrote: > Yang betul yang ini Pak thanks koreksinya, btw kok ngga langsung pakai > policydnya Cami yang sudah native pakai (R)DBMS saja pak? Testing? Oh iya, satu kelebihan policydnya Cami adalah adanya builtin dns whitelist. Jadi bisa diset semua email yang memang berasal dari server yahoo akan langsung diproses, sedangkan email yang sendernya diset sebagai yahoo.com tapi dikirim BUKAN dari server yahoo bisa digreylist. Rgds, Asfihani
Re: [postfix-users] Reject email palsu
Asfihani wrote: Yang betul yang ini Pak thanks koreksinya, btw kok ngga langsung pakai policydnya Cami yang sudah native pakai (R)DBMS saja pak? Testing? Oh iya, satu kelebihan policydnya Cami adalah adanya builtin dns whitelist. Jadi bisa diset semua email yang memang berasal dari server yahoo akan langsung diproses, sedangkan email yang sendernya diset sebagai yahoo.com tapi dikirim BUKAN dari server yahoo bisa digreylist. Rgds, Asfihani
RE: [postfix-users] Reject email palsu
Iya nich saya juga baru implementasi greylisting jadi masih harus banyak belajar. Btw file $database_name="/var/mta/greylist.db ini dibuat manual apa otomatis, soalnya sekarang aku cek log maillnya. postfix/smtpd[28853]: starting TLS engine Sep 7 13:05:44 ns1 postfix/smtpd[28853]: connect from web51115.mail.yahoo.com[206.190.39.92] Sep 7 13:05:58 ns1 postfix/smtpd[28853]: warning: connect to private/policy: No such file or directory Sep 7 13:05:59 ns1 postfix/smtpd[28853]: warning: connect to private/policy: No such file or directory Sep 7 13:05:59 ns1 postfix/smtpd[28853]: warning: problem talking to server private/policy: No such file or directory Sep 7 13:05:59 ns1 postfix/smtpd[28853]: NOQUEUE: reject: RCPT from web51115.mail.yahoo.com[206.190.39.92]: 450 Server configuration problem; from=<[EMAIL PROTECTED]> to=<[EMAIL PROTECTED]> proto=SMTP helo= Sep 7 13:06:01 ns1 postfix/smtpd[28853]: disconnect from web51115.mail.yahoo.com[206.190.39.92] Salam Dadang -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Asfihani Sent: Wednesday, September 07, 2005 1:04 PM To: postfix-users@postfix.or.id Subject: Re: [postfix-users] Reject email palsu Dadang Haryadi wrote: >Saya terapkan greylist sesuai petunjuk mas asfik di >http://www.mail-archive.com/postfix-users@postfix.or.id/msg00731.html >namunsetelah saya cek lognya ada pesan >postfix/smtpd[26890]: warning: unknown smtpd restriction: "greylist" > >Yang dipake itu >smtpd_restriction_classes = greylist > Yang betul yang ini Pak thanks koreksinya, btw kok ngga langsung pakai policydnya Cami yang sudah native pakai (R)DBMS saja pak? Testing? Asfihani
Re: [postfix-users] Reject email palsu
Dadang Haryadi wrote: Saya terapkan greylist sesuai petunjuk mas asfik di http://www.mail-archive.com/postfix-users@postfix.or.id/msg00731.html namunsetelah saya cek lognya ada pesan postfix/smtpd[26890]: warning: unknown smtpd restriction: "greylist" Yang dipake itu smtpd_restriction_classes = greylist Yang betul yang ini Pak thanks koreksinya, btw kok ngga langsung pakai policydnya Cami yang sudah native pakai (R)DBMS saja pak? Testing? Asfihani
RE: [postfix-users] Reject email palsu
Saya terapkan greylist sesuai petunjuk mas asfik di http://www.mail-archive.com/postfix-users@postfix.or.id/msg00731.html namunsetelah saya cek lognya ada pesan postfix/smtpd[26890]: warning: unknown smtpd restriction: "greylist" Yang dipake itu smtpd_restriction_classes = greylist Atau restriction_classes = greylist Soalnya kau cek dengan perintah postconf | grep restriction_classes yang muncul Cuma smtpd_restriction_classes = Ini perubahan pada main.cf smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, # reject_non_fqdn_hostname, reject_non_fqdn_sender, reject_non_fqdn_recipient, reject_unauth_destination, reject_unauth_pipelining, reject_invalid_hostname, reject_multi_recipient_bounce, reject_unknown_recipient_domain, reject_unverified_recipient, check_sender_access hash:/etc/postfix/maps/sender_access, check_recipient_access hash:/etc/postfix/maps/access, reject_rbl_client opm.blitzed.org, reject_rbl_client list.dsbl.org, reject_rbl_client bl.spamcop.net, reject_rbl_client sbl-xbl.spamhaus.org, permit restriction_classes = greylist greylist = check_policy_service unix:private/policy == Terima kasih Salam Dadang -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Asfihani Sent: Wednesday, September 07, 2005 9:57 AM To: postfix-users@postfix.or.id Subject: Re: [postfix-users] Reject email palsu Dadang Haryadi wrote: >Dear postfixer, > >Gimana caranya kita reject email dengan alamat palsu. Soalnya saya >banyak terima spam dari [EMAIL PROTECTED], padahal setelah saya cek di >yahoo email tersebut tidak ada. > >Saya udah terapkan policy seperti ini > >smtpd_sender_restrictions = reject_unverified_sender > > http://www.postfix.org/ADDRESS_VERIFICATION_README.html ... Unfortunately, some major sites such as YAHOO do not reject unknown addresses in reply to the RCPT TO command, but report a delivery failure in response to end of DATA after a message is transferred. Postfix address verification does not work with such sites. >Dan >smtpd_recipient_restrictions = permit_mynetworks, > permit_sasl_authenticated, > reject_non_fqdn_sender, > reject_non_fqdn_recipient, > reject_unauth_destination, > reject_unauth_pipelining, > reject_invalid_hostname, > reject_multi_recipient_bounce, > reject_unverified_recipient, > check_recipient_access >hash:/etc/postfix/access, > reject_rbl_client opm.blitzed.org, > reject_rbl_client list.dsbl.org, > reject_rbl_client bl.spamcop.net, > reject_rbl_client >sbl-xbl.spamhaus.org, > permit > >Tapi saya lihat dimailbox saya masih menerima email palsu >tersebut.walaupun sebenarnya terdeteksi sbagai spam tapi alangkah >baiknya langsung direject dari postfix bukan oleh amavis. > > Pasang policyd (policyd.sf.net), greylist untuk domain yang anda anggap menjadi spam source. Asfihani
Re: [postfix-users] Reject email palsu
Dadang Haryadi wrote: Dear postfixer, Gimana caranya kita reject email dengan alamat palsu. Soalnya saya banyak terima spam dari [EMAIL PROTECTED], padahal setelah saya cek di yahoo email tersebut tidak ada. Saya udah terapkan policy seperti ini smtpd_sender_restrictions = reject_unverified_sender http://www.postfix.org/ADDRESS_VERIFICATION_README.html ... Unfortunately, some major sites such as YAHOO do not reject unknown addresses in reply to the RCPT TO command, but report a delivery failure in response to end of DATA after a message is transferred. Postfix address verification does not work with such sites. Dan smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_non_fqdn_sender, reject_non_fqdn_recipient, reject_unauth_destination, reject_unauth_pipelining, reject_invalid_hostname, reject_multi_recipient_bounce, reject_unverified_recipient, check_recipient_access hash:/etc/postfix/access, reject_rbl_client opm.blitzed.org, reject_rbl_client list.dsbl.org, reject_rbl_client bl.spamcop.net, reject_rbl_client sbl-xbl.spamhaus.org, permit Tapi saya lihat dimailbox saya masih menerima email palsu tersebut.walaupun sebenarnya terdeteksi sbagai spam tapi alangkah baiknya langsung direject dari postfix bukan oleh amavis. Pasang policyd (policyd.sf.net), greylist untuk domain yang anda anggap menjadi spam source. Asfihani
