![]() |
[HowTo] Block bogus sender mx in postfix... - Printable Version +- ispCP - Board - Support (http://www.isp-control.net/forum) +-- Forum: ispCP Omega Contributions Area (/forum-40.html) +--- Forum: Howtos (/forum-41.html) +--- Thread: [HowTo] Block bogus sender mx in postfix... (/thread-1773.html) |
[HowTo] Block bogus sender mx in postfix... - rbtux - 11-13-2007 06:47 AM Some Spamservers use mx records pointing to IANA reserved address ranges or wildcard addresses This servers can be blocked by postfix with the following steps: 1. Create /etc/postfix/bogus_mx.cidr with the following content: Quote:# Reserved Ranges 2. Configure Postfix: Add the following before permit_mynetworks to smtpd_sender_restrictions of your /etc/postfix/main.cf: Quote:check_sender_mx_access cidr:/etc/postfix/bogus_mx.cidr 3. Reload Postfix: Quote:postfix reload 4. Keep your wildcard section up to date (I do it once a week) This can be done with the following skript (It takes a while to run...): Thx to Uwe Driessen, Jan P. Kessler, Ralph Hildebrandt and Andreas Winkelmann from the german Postfixbuch-Mailinglist for creating this script... I hope I did not miss somebody! Quote:#!/bin/bashNoticed? This was a oneliner :-) 5. Thats it RE: [HowTo] Block bogus sender mx in postfix... - BeNe - 11-13-2007 06:50 AM Cool! ![]() Thanks a lot....very useful! Greez BeNe RE: [HowTo] Block bogus sender mx in postfix... - pgentoo - 12-02-2007 09:28 AM You have a small typo. In one point you call the file bogus_mx.cider, and the other spot you call it bogus_mx.cidr. Not a big issue, just figured i'd let you know. - Jesse RE: [HowTo] Block bogus sender mx in postfix... - rbtux - 12-02-2007 09:32 AM thanks jesse fixed it... RE: [HowTo] Block bogus sender mx in postfix... - rbtux - 12-02-2007 09:48 AM updated bogus wildcard mx list... RE: [HowTo] Block bogus sender mx in postfix... - raphael - 12-05-2007 10:44 AM better turn anti spoofing protection (see /etc/sysctl.conf), and use linblock with a list from bluetack. See: http://nas-central.org/index.php/Peer_Guardian-based_blocklist_(Linblock) (etch has all the cpan modules, no need to download from cpan.org). RE: [HowTo] Block bogus sender mx in postfix... - rbtux - 12-05-2007 05:07 PM Well the both methods does not serve the same purpose... The way with sender-mx block addresses that must not be used as mx-hosts or addresses that are wildcards an therefore could be used by every domain... The method you mentioned depends on third party listings which at least I would not use unscored... This purpose is well done by policyd-weight... But every admin should know himself, howto stay speamfree (or at least nearly spamfree) RE: [HowTo] Block bogus sender mx in postfix... - rbtux - 12-19-2007 08:03 PM updated list... RE: [HowTo] Block bogus sender mx in postfix... - rbtux - 01-16-2009 06:44 AM updated bogus list... you may do so too ;-) |