[Rack] Mail spam controls.

Ben Kochie ben at nerp.net
Sat Apr 21 17:13:10 UTC 2012


I'm going to change the mail filter rules on noisebridge.net to better 
control the inbound spam.

From:
smtpd_recipient_restrictions =
   permit_mynetworks,
   reject_unauth_destination,
   check_sender_access hash:/etc/postfix/sender_access

To:
smtpd_recipient_restrictions =
   permit_mynetworks,
   reject_unauth_destination,
   check_sender_access hash:/etc/postfix/sender_access,
   reject_invalid_hostname,
   reject_non_fqdn_sender,
   reject_non_fqdn_recipient,
   reject_unknown_sender_domain,
   reject_unknown_recipient_domain,
   reject_rbl_client zen.spamhaus.org,
   reject_rbl_client cbl.abuseat.org,
   reject_rbl_client dnsbl-1.uceprotect.net,
   permit

The key two changes here are to reject mails with common RFC violations, 
and then check 3 reliable blacklists.

This should reduce the junk in our moderation queues.

I'm also considering enabling greylist filtering.  But let's see how these 
changes go.

-ben



More information about the Rack mailing list