[Rack] Mail spam controls.

Ben Kochie ben at nerp.net
Sun Apr 22 18:55:47 UTC 2012


Looks like it's working:

Apr 22 06:49:19 m1 postfix/smtpd[12007]: NOQUEUE: reject: RCPT from 
84-10-132-190.dynamic.chello.pl[84.10.132.190]: 554 5.7.1 Service 
unavailable; Client host [84.10.132.190] blocked using zen.spamhaus.org; 
http://www.spamhaus.org/query/bl?ip=84.10.132.190; 
from=<abdullahi at wjadserver.com> to=<rack at lists.noisebridge.net> 
proto=ESMTP helo=<84-10-132-190.dynamic.chello.pl>

Apr 22 09:05:09 m1 postfix/smtpd[20716]: NOQUEUE: reject: RCPT from 
unknown[218.156.232.162]: 554 5.7.1 Service unavailable; Client host 
[218.156.232.162] blocked using zen.spamhaus.org; 
http://www.spamhaus.org/query/bl?ip=218.156.232.162; 
from=<dunningl9 at deltamar.net> to=<rack at lists.noisebridge.net> proto=ESMTP 
bhelo=<kdn.ktguide.com>


-ben

On Sat, 21 Apr 2012, Ben Kochie wrote:

> I'm going to change the mail filter rules on noisebridge.net to better
> control the inbound spam.
>
> From:
> smtpd_recipient_restrictions =
>   permit_mynetworks,
>   reject_unauth_destination,
>   check_sender_access hash:/etc/postfix/sender_access
>
> To:
> smtpd_recipient_restrictions =
>   permit_mynetworks,
>   reject_unauth_destination,
>   check_sender_access hash:/etc/postfix/sender_access,
>   reject_invalid_hostname,
>   reject_non_fqdn_sender,
>   reject_non_fqdn_recipient,
>   reject_unknown_sender_domain,
>   reject_unknown_recipient_domain,
>   reject_rbl_client zen.spamhaus.org,
>   reject_rbl_client cbl.abuseat.org,
>   reject_rbl_client dnsbl-1.uceprotect.net,
>   permit
>
> The key two changes here are to reject mails with common RFC violations,
> and then check 3 reliable blacklists.
>
> This should reduce the junk in our moderation queues.
>
> I'm also considering enabling greylist filtering.  But let's see how these
> changes go.
>
> -ben
> _______________________________________________
> Rack mailing list
> Rack at lists.noisebridge.net
> https://www.noisebridge.net/mailman/listinfo/rack
>



More information about the Rack mailing list