Postfix and antispamming

[raphael]

ok; and what config files need to be modified? with that changes?
does it exist on non-Debian systems? already packaged? official package? does it exist for non-linux systems?

...

[Sweeny]

The only thing which must be modified is postfixs main.cf policy-weightd is a perl script.
Just have a look at http://www.policyd-weight.org/howto.html It's very simple to setup and should easily implemented in ISPCP

[raphael]

that doesn't actually anwser all of my questions

[BeNe]

policyd-weight is available for FreeBSD, maybe also for *BSD --> http://www.freshports.org/mail/postfix-policyd-weight/
It is already packed for Debian a "apt-get install policyd-weight" should do it.

I mean also that it is avialabe for Fedora/RedHat


Greez BeNe

[raphael]

Ok, I think you already know my new procedure before I do, almost, any change -> new ticket

(I need to check if any config change should be made)

[BeNe]

Should i create a new one only for the Package ?
There is already a Ticket open --> http://www.isp-control.net/ispcp/ticket/825
So we could add this info here....

Greez BeNe

[raphael]

hmm, right, its ok with #825

[BeNe]

I combined policyd-weight with fail2ban now and this is a perfect solution for me to save resources on the Server.
Fail2ban set the IP of every mail.log entry like this

Code:

failregex = reject: RCPT from (.*)\[<HOST>\]: 550

on the fail2ban blacklist for 24h.

The result was "0" Spam(!) today and all other real needed mails in my Inbox. *damn*

It works perfect for me with this System:

Quote:policyd-weight (before Queue + IP ban here) -> postgrey -> Maia -> InBox

Greez BeNe

[Sweeny]

Hm looks sweet I'm going to test your configuration on one of our backup mx systems Thank you for the info

[BeNe]

This part should be in your /etc/fail2ban/jail.conf:

Code:

[postfix]
enabled = true
port = smtp
filter = postfix
logpath = /var/log/mail.log
maxretry = 1
bantime = 86400
# 1 month = 2419200; week = 604800; day = 86400

Put the following line to /etc/fail2ban/filter.d/postfix.conf

Code:

failregex = reject: RCPT from (.*)\[<HOST>\]: 550

Add a info like this:

Code:

Your IP-Address is banned from our Mailsystems during the next 24 hours

in your
/usr/sbin/policyd-weight to every 550 code.
You can check the current banned ip´s with

Code:

iptables -L fail2ban-postfix

Greez BeNe