Re: Blocking TLDs

2023-02-18 Thread Matus UHLAR - fantomas
08.02.2023 12:14, Viktor Dukhovni wrote: .. /etc/postfix/sender-access: top REJECT I employ crude anti-spam measures .topREJECT I employ crude anti-spam measures On 18.02.23 09:34, Michael Tokarev wrote: I wonder how effective to block just the TLDs. I guess it is

Re: Blocking TLDs

2023-02-17 Thread Michael Tokarev
08.02.2023 12:14, Viktor Dukhovni wrote: .. /etc/postfix/sender-access: top REJECT I employ crude anti-spam measures .topREJECT I employ crude anti-spam measures I wonder how effective to block just the TLDs. I guess it is zero, no? I *guess* foo@top shouldn't

Re: Blocking TLDs

2023-02-16 Thread Wietse Venema
James Pifer: > On 2/16/2023 9:56 AM, Wietse Venema wrote: > > James Pifer: > >> On 2/16/2023 9:21 AM, Viktor Dukhovni wrote: > >>> Don't forget set an empty: > >>> > >>> parent_domain_matches_subdomains = > >>> > >> Where should that go exactly? > > In main.cf. > > > > Wietse > > I

Re: Blocking TLDs

2023-02-16 Thread James Pifer
On 2/16/2023 9:56 AM, Wietse Venema wrote: James Pifer: On 2/16/2023 9:21 AM, Viktor Dukhovni wrote: Don't forget set an empty: parent_domain_matches_subdomains = Where should that go exactly? In main.cf. Wietse I should have been more specific. Where in main.cf should it

Re: Blocking TLDs

2023-02-16 Thread Wietse Venema
James Pifer: > On 2/16/2023 9:21 AM, Viktor Dukhovni wrote: > > Don't forget set an empty: > > > > parent_domain_matches_subdomains = > > > > Where should that go exactly? In main.cf. Wietse

Re: Blocking TLDs

2023-02-16 Thread James Pifer
On 2/16/2023 9:21 AM, Viktor Dukhovni wrote: On Thu, Feb 16, 2023 at 08:23:00AM -0500, James Pifer wrote: Anyone see anything wrong with it or have other suggestions? smtpd_recipient_restrictions =     check_client_access inline:{     { 107.182.131   = REJECT This mail

Re: Blocking TLDs

2023-02-16 Thread Viktor Dukhovni
On Thu, Feb 16, 2023 at 08:23:00AM -0500, James Pifer wrote: > Anyone see anything wrong with it or have other suggestions? > > smtpd_recipient_restrictions = >     check_client_access inline:{ >     { 107.182.131   = REJECT This mail server rejects mail > from the

Re: Blocking TLDs

2023-02-16 Thread James Pifer
On 2/8/2023 1:13 PM, James Pifer wrote: On 2/8/2023 1:02 PM, Jaroslaw Rafa wrote: Dnia  8.02.2023 o godz. 12:55:58 James Pifer pisze: I would prefer to quarantine rather than reject, if I can figure out how to do that. I would at least be able to look through them periodically and see if

Re: Blocking TLDs

2023-02-08 Thread postfix
dnf -y install postfix-pcre It was added later, but by then I had already converted to regex. FYI: I was given the impression that pcre has better performance than regex in postfix, if that is something relevant to you.

Re: Blocking TLDs

2023-02-08 Thread mailmary
It was added later, but by then I had already converted to regex. On Wed, 08 Feb 2023 11:34:49 -0500 post...@ptld.com wrote: > > Since I'm using AlmaLinux, a derivative of RHEL, it does not have PCRE > > because Redhat decided to remove it entirely from RHEL. > > Thus, I had to convert all

Re: Blocking TLDs

2023-02-08 Thread James Pifer
On 2/8/2023 1:02 PM, Jaroslaw Rafa wrote: Dnia 8.02.2023 o godz. 12:55:58 James Pifer pisze: I would prefer to quarantine rather than reject, if I can figure out how to do that. I would at least be able to look through them periodically and see if something is legit. I suddenly started

Re: Blocking TLDs

2023-02-08 Thread Jaroslaw Rafa
Dnia 8.02.2023 o godz. 12:55:58 James Pifer pisze: > I would prefer to quarantine rather than reject, if I can figure out > how to do that. I would at least be able to look through them > periodically and see if something is legit. > > I suddenly started getting these (.store,.shop, etc) a could

Re: Blocking TLDs

2023-02-08 Thread James Pifer
On 2/8/2023 12:37 PM, Rob McGee wrote: On 2/8/2023 3:14 AM, Viktor Dukhovni wrote: On Wed, Feb 08, 2023 at 10:00:14AM +0200, mailm...@ionos.gr wrote: /\.top$/ REJECT /\.xyz$/ REJECT /\.cam$/ REJECT /\.fun$/ REJECT /\.buzz$/ REJECT /\.club$/ REJECT /\.link$/ REJECT /\.hinet\.net$/ REJECT Why

Re: Blocking TLDs

2023-02-08 Thread Rob McGee
On 2/8/2023 3:14 AM, Viktor Dukhovni wrote: On Wed, Feb 08, 2023 at 10:00:14AM +0200, mailm...@ionos.gr wrote: /\.top$/ REJECT /\.xyz$/ REJECT /\.cam$/ REJECT /\.fun$/ REJECT /\.buzz$/ REJECT /\.club$/ REJECT /\.link$/ REJECT /\.hinet\.net$/ REJECT Why everyone feels they need regular

Re: Blocking TLDs

2023-02-08 Thread postfix
Since I'm using AlmaLinux, a derivative of RHEL, it does not have PCRE because Redhat decided to remove it entirely from RHEL. Thus, I had to convert all my "pcre:" into "regexp:", like the above. I'm using a similar flavor of RHEL and dnf -y install postfix-pcre worked for me. Is that

Re: Blocking TLDs

2023-02-08 Thread James Pifer
On 2/8/2023 8:32 AM, Wietse Venema wrote: James Pifer: The error was: Feb? 8 07:38:11 mailserver postfix/smtpd[446839]: NOQUEUE: reject: RCPT from mail-qt1-f179.google.com[209.85.160.179]: 451 4.3.5 Server configuration error; from= to= proto=ESMTP helo= The cause of the problem was logged

Re: Blocking TLDs

2023-02-08 Thread natan
Hi Before add sender-acces works fine ? Can you send output postconf -m ? W dniu 8.02.2023 o 14:15, James Pifer pisze: On 2/8/2023 4:14 AM, Viktor Dukhovni wrote: On Wed, Feb 08, 2023 at 10:00:14AM +0200, mailm...@ionos.gr wrote: /\.top$/ REJECT /\.xyz$/ REJECT /\.cam$/ REJECT /\.fun$/

Re: Blocking TLDs

2023-02-08 Thread Wietse Venema
James Pifer: > The error was: > Feb? 8 07:38:11 mailserver postfix/smtpd[446839]: NOQUEUE: reject: RCPT > from mail-qt1-f179.google.com[209.85.160.179]: 451 4.3.5 Server > configuration error; from= > to= proto=ESMTP helo= The cause of the problem was logged IMMEDIATELY BEFORE THAT LINE.

Re: Blocking TLDs

2023-02-08 Thread James Pifer
On 2/8/2023 4:14 AM, Viktor Dukhovni wrote: On Wed, Feb 08, 2023 at 10:00:14AM +0200, mailm...@ionos.gr wrote: /\.top$/ REJECT /\.xyz$/ REJECT /\.cam$/ REJECT /\.fun$/ REJECT /\.buzz$/ REJECT /\.club$/ REJECT /\.link$/ REJECT /\.hinet\.net$/ REJECT Why everyone feels they need regular

Re: Blocking TLDs

2023-02-08 Thread Wietse Venema
mailm...@ionos.gr: > Here is how I do it: > > check_sender_access regexp:/etc/postfix/sender_domain_checks > > here are the (partial) contents of /etc/postfix/sender_domain_checks: > > /\.top$/ REJECT > /\.xyz$/ REJECT > /\.cam$/ REJECT > /\.fun$/ REJECT > /\.buzz$/ REJECT > /\.club$/ REJECT >

Re: Blocking TLDs

2023-02-08 Thread Viktor Dukhovni
On Wed, Feb 08, 2023 at 10:00:14AM +0200, mailm...@ionos.gr wrote: > /\.top$/ REJECT > /\.xyz$/ REJECT > /\.cam$/ REJECT > /\.fun$/ REJECT > /\.buzz$/ REJECT > /\.club$/ REJECT > /\.link$/ REJECT > /\.hinet\.net$/ REJECT Why everyone feels they need regular expressions for this is a mystery.

Re: Blocking TLDs

2023-02-08 Thread natan
Hi Please send info like: postconf -m Probably you dont have pcre try postmap -q your_ask pcre:/etc/postfix/reject_domains W dniu 7.02.2023 o 22:49, James Pifer pisze: Hello all. I'm trying to block some TLDs and everything I try I'm getting:  451 4.3.5 : Sender address rejected: Server

Re: Blocking TLDs

2023-02-08 Thread mailmary
Here is how I do it: check_sender_access regexp:/etc/postfix/sender_domain_checks here are the (partial) contents of /etc/postfix/sender_domain_checks: /\.top$/ REJECT /\.xyz$/ REJECT /\.cam$/ REJECT /\.fun$/ REJECT /\.buzz$/ REJECT /\.club$/ REJECT /\.link$/ REJECT /\.hinet\.net$/ REJECT

Re: Blocking TLDs

2023-02-07 Thread Viktor Dukhovni
On Tue, Feb 07, 2023 at 04:02:13PM -0600, Noel Jones wrote: > > Hello all. I'm trying to block some TLDs and everything I try I'm > > getting:  451 4.3.5 : Sender address rejected: > > Server configuration error; > > > > What is the error message logged before that? > > Does your postfix

Re: Blocking TLDs

2023-02-07 Thread Noel Jones
On 2/7/2023 3:49 PM, James Pifer wrote: Hello all. I'm trying to block some TLDs and everything I try I'm getting:  451 4.3.5 : Sender address rejected: Server configuration error; What is the error message logged before that? Does your postfix support the pcre map type? Maybe try regex:

Blocking TLDs

2023-02-07 Thread James Pifer
Hello all. I'm trying to block some TLDs and everything I try I'm getting:  451 4.3.5 : Sender address rejected: Server configuration error; Obviously this is a configuration issue. I've tried following these sites among others: https://forum.centos-webpanel.com/index.php?topic=10649.0

Re: Blocking TLDs with check_sender_access

2018-06-26 Thread Viktor Dukhovni
> On Jun 26, 2018, at 1:15 PM, @lbutlr wrote: > >> No, it works substantially better in check_sender_access, and very poorly >> in header_checks. > > It works very well for me, and has for years. The regular expressions you posted are fragile, subject to easy false posititves and should not

Re: Blocking TLDs with check_sender_access

2018-06-26 Thread @lbutlr
On Jun 26, 2018, at 09:10, Viktor Dukhovni wrote: > No, it works substantially better in check_sender_access, and very poorly > in header_checks. It works very well for me, and has for years. -- This is my signature. There are many like it, but this one is mine.

Re: Blocking TLDs with check_sender_access

2018-06-26 Thread Viktor Dukhovni
> On Jun 26, 2018, at 6:07 AM, @lbutlr wrote: > > I use header checks: > > /.*\.example.top/ DUNNO > /.*\.FriendwithJokeDoamin.xxx/ OK > /.*\.(com|net|org|edu|gov|ca|mx|de|dk|fi|uk|us|tv|info|biz|eu|es|il|it|nl|name|jp|host|au|nz)$/ > DUNNO > /.*\.*/ 550 Mail to or from this TLD is not

Re: Blocking TLDs with check_sender_access

2018-06-26 Thread @lbutlr
On 25 Jun 2018, at 14:45, Alex wrote: > I have a check_sender_access restriction that blocks many TLDs like > .red and .space. Problem is that we have one legitimate .red customer > (what was he thinking?) that needs to send us mail. How can I allow > this single domain? I use header checks:

Re: Blocking TLDs with check_sender_access

2018-06-25 Thread Wietse Venema
Alex: > HI, > > I have a check_sender_access restriction that blocks many TLDs like > .red and .space. Problem is that we have one legitimate .red customer > (what was he thinking?) that needs to send us mail. How can I allow > this single domain? > > smtpd_sender_restrictions = >

Blocking TLDs with check_sender_access

2018-06-25 Thread Alex
HI, I have a check_sender_access restriction that blocks many TLDs like .red and .space. Problem is that we have one legitimate .red customer (what was he thinking?) that needs to send us mail. How can I allow this single domain? smtpd_sender_restrictions = permit_mynetworks,

RE: Blocking TLDs

2016-02-25 Thread Wolfe , Robert
-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] On Behalf Of pe...@ixp.jp Sent: Thursday, February 25, 2016 12:38 AM To: postfix-users@postfix.org Subject: Re: Blocking TLDs On Feb/19.15:36:11, Wolfe, Robert wrote: > I get a LOT of emails from domains that have *.download and *.

Re: Blocking TLDs

2016-02-21 Thread Ansgar Wiechers
On 2016-02-20 Sebastian Nielsen wrote: > 1: REJECT tells the spammer "Hey, your spam got stuck in the spam > filter. Wanna try again?". Better to DISCARD it so the spammer think > they got the spam through, then they won't switch to a new domain. > > I don't think anyone ever will receive

Re: SV: SV: SV: SV: Blocking TLDs

2016-02-20 Thread Marco
is TCP/IP like website traffic, IRC traffic, Skype > traffic, DNS traffic or whatever. > > > -Ursprungligt meddelande- > Från: owner-postfix-us...@postfix.org > [mailto:owner-postfix-us...@postfix.org] För Robert Schetterer > Skickat: den 20 februari 2016 13:49 > Till

SV: SV: SV: SV: Blocking TLDs

2016-02-20 Thread Sebastian Nielsen
-- Från: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] För Robert Schetterer Skickat: den 20 februari 2016 13:49 Till: postfix-users@postfix.org Ämne: Re: SV: SV: SV: Blocking TLDs Am 20.02.2016 um 12:01 schrieb Sebastian Nielsen: > Why are you people so negative against

Re: SV: SV: SV: Blocking TLDs

2016-02-20 Thread Robert Schetterer
Am 20.02.2016 um 12:01 schrieb Sebastian Nielsen: > Why are you people so negative against DISCARD, and wants to use REJECT Silent discard mail is not allowed in many EU countries, youre the postman you dont have to deliver bombs ( virus ), you may react on marketing letters (spam ) by sort them

SV: SV: SV: Blocking TLDs

2016-02-20 Thread Sebastian Nielsen
s@postfix.org Ämne: Re: SV: SV: Blocking TLDs On 2016-02-20 00:52, Sebastian Nielsen wrote: > 1: REJECT tells the spammer "Hey, your spam got stuck in the spam > filter. Wanna try again?". if thay do, so what ?, its not possible for spammers to make remote administoring on postfix this wou

Re: SV: SV: Blocking TLDs

2016-02-20 Thread Benny Pedersen
On 2016-02-20 00:52, Sebastian Nielsen wrote: 1: REJECT tells the spammer "Hey, your spam got stuck in the spam filter. Wanna try again?". if thay do, so what ?, its not possible for spammers to make remote administoring on postfix this would be in vain anyway, and the point on discard is

Re: SV: SV: Blocking TLDs

2016-02-19 Thread Michael Orlitzky
On 02/19/2016 06:52 PM, Sebastian Nielsen wrote: > > 2: Its just a habit, everytime some process complains of not able to > access a file, "666" is the universal solution. Of course, this isn't > recommended in a web hosting setup, but if you're hosting for example > a mail server for a company,

Re: Blocking TLDs

2016-02-19 Thread yahoogroups
Actually I have a xyz domain that mirrors my com domain. I use it for test purposes.  Sent from my BlackBerry 10 smartphone.   Original Message   From: Sebastian Nielsen Sent: Friday, February 19, 2016 3:53 PM To: postfix-users@postfix.org Subject: SV: SV: Blocking TLDs 1: REJECT tells

SV: SV: Blocking TLDs

2016-02-19 Thread Sebastian Nielsen
wner-postfix-us...@postfix.org] För A. Schulze Skickat: den 19 februari 2016 23:52 Till: postfix-users@postfix.org Ämne: Re: SV: Blocking TLDs Sebastian Nielsen: > Then paste all the DISCARD lines into a new file called > /etc/postfix/banned_tlds (and also add some own TLDs there

RE: SV: Blocking TLDs

2016-02-19 Thread Wolfe, Robert
, February 19, 2016 4:52 PM To: postfix-users@postfix.org Subject: Re: SV: Blocking TLDs Sebastian Nielsen: > Then paste all the DISCARD lines into a new file called > /etc/postfix/banned_tlds (and also add some own TLDs there, its just > to copy paste one line and then change the TLD), and al

RE: SV: Blocking TLDs

2016-02-19 Thread Wolfe, Robert
: Blocking TLDs Sebastian Nielsen: > Then paste all the DISCARD lines into a new file called > /etc/postfix/banned_tlds (and also add some own TLDs there, its just > to copy paste one line and then change the TLD), and also remove lines > for TLDs you don’t want to bloc

Re: SV: Blocking TLDs

2016-02-19 Thread A. Schulze
-spoofed state after that, for obvious reasons. Från: Wolfe, Robert [mailto:robert.wo...@robertwolfe.org] Skickat: den 19 februari 2016 23:19 Till: 'Sebastian Nielsen' <sebast...@sebbe.eu>; postfix-users@postfix.org Ämne: RE: Blocking TLDs Just copy and passed the DISCARD co

SV: Blocking TLDs

2016-02-19 Thread Sebastian Nielsen
: Wolfe, Robert [mailto:robert.wo...@robertwolfe.org] Skickat: den 19 februari 2016 23:19 Till: 'Sebastian Nielsen' <sebast...@sebbe.eu>; postfix-users@postfix.org Ämne: RE: Blocking TLDs Just copy and passed the DISCARD contents into banned_tlds? From: owner-postfix-us...@postf

RE: Blocking TLDs

2016-02-19 Thread Wolfe, Robert
Just copy and passed the DISCARD contents into banned_tlds? From: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] On Behalf Of Sebastian Nielsen Sent: Friday, February 19, 2016 3:50 PM To: postfix-users@postfix.org Subject: SV: Blocking TLDs

SV: Blocking TLDs

2016-02-19 Thread Sebastian Nielsen
-postfix-us...@postfix.org] För Wolfe, Robert Skickat: den 19 februari 2016 22:36 Till: postfix-users@postfix.org Ämne: Blocking TLDs Greetings all! This is actually my first posting to the mailing list, but have actually been following along on a regular basis and have learned quite a bit of good

Blocking TLDs

2016-02-19 Thread Wolfe, Robert
Greetings all! This is actually my first posting to the mailing list, but have actually been following along on a regular basis and have learned quite a bit of good things (and bad things *smiles*) about Postfix. Unfortunately, I have one question that I am hoping someone here on the mailing