From owner-freebsd-questions Sun Jan 13 10:45:40 2002 Delivered-To: freebsd-questions@freebsd.org Received: from ns2.worldgatein.com (ns2.worldgatein.com [203.109.64.24]) by hub.freebsd.org (Postfix) with ESMTP id 6709537B404 for ; Sun, 13 Jan 2002 10:45:36 -0800 (PST) Received: from rivendell.worldgatein.net (interoffice.worldgatein.net [203.109.64.31]) by ns2.worldgatein.com (Postfix) with ESMTP id CE32BBE13; Mon, 14 Jan 2002 00:11:12 +0530 (IST) Received: by rivendell.worldgatein.net (Postfix, from userid 1001) id 3D1D332609; Mon, 14 Jan 2002 00:19:30 +0530 (IST) Date: Mon, 14 Jan 2002 00:19:30 +0530 From: Devdas Bhagat To: Drew Tomlinson Cc: questions@freebsd.org Subject: Re: Reasonable UCE Controls for Postfix? Message-ID: <20020114001930.E13188@rivendell.worldgatein.net> Reply-To: Devdas Bhagat References: <008b01c19c5b$c162a8f0$0301a8c0@bigdaddy> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <008b01c19c5b$c162a8f0$0301a8c0@bigdaddy>; from drew@mykitchentable.net on Sun, Jan 13, 2002 at 09:57:24AM -0800 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On 13/01/02 09:57 -0800, Drew Tomlinson wrote: > I run Postfix on a FBSD 4.4 server. I have spent the last few days > combing the Net for information on how to reduce my level of received > spam. I've found the Postfix pages describing all the individual UCE > controls but I haven't found anything that ties it all together and A google search on the postfix list archives would point you to Ralf Hildebrandt's tutorials. My restrictions are: smtpd_recipient_restrictions = check_client_access hash:/etc/postfix/access reject_unauth_pipelining reject_unknown_sender_domain reject_maps_rbl permit_mynetworks check_relay_domains Normally we would keep permit_mynetworks higher up in the order, but I prefer that people use valid domains in their email (just to stop outbound spam). /etc/postfix/access is a list of domains that have spammed me and silently get dropped. maps_rbl_domains = relays.ordb.org inputs.orbz.org You could add relays.osirusoft.com to this, as well as the blackholes list from http://doema.wirehub.nl/error/blackholes.txt Another list is at http://www.five-ten-sg.com/blackhole.php Note that relays.osirusoft.com *can* block lots of valid mail, probably including the FreeBSD lists since they let anyone post. http://mrbill.net/postfix is a collection of regular expressions for header and body checks (use with procmail or postfix, these are expensive). Devdas Bhagat To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message