From owner-freebsd-questions@freebsd.org Mon Aug 8 07:54:02 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 7B15ABB2839 for ; Mon, 8 Aug 2016 07:54:02 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [IPv6:2001:8b0:151:1:c4ea:bd49:619b:6cb3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smtp.infracaninophile.co.uk", Issuer "infracaninophile.co.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 11F401972 for ; Mon, 8 Aug 2016 07:54:02 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from liminal.local (liminal.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3636:3bff:fed4:b0d6]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: m.seaman@infracaninophile.co.uk) by smtp.infracaninophile.co.uk (Postfix) with ESMTPSA id EABD0C4CD for ; Mon, 8 Aug 2016 07:53:58 +0000 (UTC) Authentication-Results: smtp.infracaninophile.co.uk; dmarc=none header.from=FreeBSD.org Authentication-Results: smtp.infracaninophile.co.uk/EABD0C4CD; dkim=none; dkim-atps=neutral Subject: Re: Need advice for setting up mail server To: freebsd-questions@freebsd.org References: <2394887a809b4ad8e702d1d13bb1337c@mail.zplay.eu> <20160807180149.GC12411@len-t420.klaas> <20160807181230.GD12411@len-t420.klaas> From: Matthew Seaman Message-ID: <2c14614d-5f7a-9f5d-da79-d68372ab824d@FreeBSD.org> Date: Mon, 8 Aug 2016 08:53:58 +0100 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:45.0) Gecko/20100101 Thunderbird/45.2.0 MIME-Version: 1.0 In-Reply-To: <20160807181230.GD12411@len-t420.klaas> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="53fERks7kUr1hNWwaMlL2XNS5WbsjQWxk" X-Spam-Status: No, score=-1.2 required=5.0 tests=BAYES_00,SPF_SOFTFAIL autolearn=no autolearn_force=no version=3.4.1 X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on smtp.infracaninophile.co.uk X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Aug 2016 07:54:02 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --53fERks7kUr1hNWwaMlL2XNS5WbsjQWxk Content-Type: multipart/mixed; boundary="9dl7al6Ww6ROC8IVedpknuUg3NfeR5oVS" From: Matthew Seaman To: freebsd-questions@freebsd.org Message-ID: <2c14614d-5f7a-9f5d-da79-d68372ab824d@FreeBSD.org> Subject: Re: Need advice for setting up mail server References: <2394887a809b4ad8e702d1d13bb1337c@mail.zplay.eu> <20160807180149.GC12411@len-t420.klaas> <20160807181230.GD12411@len-t420.klaas> In-Reply-To: <20160807181230.GD12411@len-t420.klaas> --9dl7al6Ww6ROC8IVedpknuUg3NfeR5oVS Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable On 07/08/2016 19:12, Niklaas Baudet von Gersdorff wrote: > I forgot to mention postscreen(8). For its functionality see >=20 > http://www.postfix.org/POSTSCREEN_README.html >=20 > I just learned about it some weeks ago, so I haven't tested it > yet. Anyway, I guess it's a cleverer and less resource hungry > solution than other anti-spam tool. postscreen is cool. It's a single fairly small process that handles the initial connection for inbound mail and it runs a number of fast and cheap anti-spam measures, like verifying the forward and reverse lookups of the EHLO name and remote IP number in the TCP connection. Once the incoming connection as passed this pre-screen, it gets handed of to the normal postfix smtpd process for processing: it's only at this stage that you'ld run heuristic anti-spam rules that do detailed analysis of message content. Cheers, Matthew --9dl7al6Ww6ROC8IVedpknuUg3NfeR5oVS-- --53fERks7kUr1hNWwaMlL2XNS5WbsjQWxk Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQJ8BAEBCgBmBQJXqDqWXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ2NTNBNjhCOTEzQTRFNkNGM0UxRTEzMjZC QjIzQUY1MThFMUE0MDEzAAoJELsjr1GOGkATA6EP/1v3Y3PM+UAiEqxIVhX6YpMA l0PpRcwcwY427F4HmLHjSMc7JIPuqiIPvJcmGOX1AWadz6e8uVpudoY0heY7taHa ZLeVtHpySQO4mbb2GcqISvwC/cbppCRGHwyoXHVv9Px1li6fCqGB6J0Jo/PEcy72 4SHNtmFowJe0UjQXW9xzeKFkkBkgz63Bmvg8BcSDgMTQfo9VCEFlUMDoBAn+S3Kn pbFpvHqKmYUppyD2DOLT204PvpZgv60zBeLsPLsOc63ypN2BF7a1+hbqSDn+MCpN zKniR61pVP6gX7Gox24g7vrUgNM5KoH1tC2IzmZGPvHhR/vvMQSERN9hpgOwoTB4 WsA6r8N/Xv3T54GKL3rgI23yhMfXP6MsqDQ81i6sRcLaRcATK//1NF9DF49K2pBQ 6GeRkAW9H+Zn/ElaAeVbWyqnIEykKcT8dqZvWCdaaThDP7a69z3T28CenjY6j92C ERqEWJYXNyHMQqp8/Ytlf8OtS9N/ErstZVBPDhYjYP9zU47pZ5yEs3KS+LkZfIyF j+QkuDJ305MBP97DlD8lUFcBNq9QndYLfnidm2EENvKp8Hk8IqhNJ0xuM4rr/d+N cN+bsANNC9dqhBREsMwwIjOC+4Z6bG94o5Q6fAxHyUX+A0QJQ9j+CMJQYNLRt5HG OC3YCEMIIS93e0h+vl4j =g2d4 -----END PGP SIGNATURE----- --53fERks7kUr1hNWwaMlL2XNS5WbsjQWxk--