[EMAIL PROTECTED] a écrit :
> 
> I too am trying to achieve this, here is my blocked_senders map followed by 
> my postconf -n  output:
> 
> Would this achieve the desired results of restricting inbound email with 
> faked "From" headers?
> 
> Many thanks in advance,
> 
> .vp
> 
> 
>               ### blocked_senders ###
> example.com              554 example.com sender? But you're not in my network 
> ...
> example.org              554 example.org sender? But you're not in my network 
> ...
> example.net              554 example.net sender? But you're not in my network 
> ...
> example.us               554 example.us  sender? But you're not in my network 
> ...
> #######################################################
> [snip]
> smtpd_recipient_restrictions = permit_mynetworks,       check_sender_access 
> dbm:/etc/postfix/blocked_senders,   reject_rbl_client 67679988282.rbl.com,  
> reject_unauth_destination

this is unsfae. use

smtpd_recipient_restrictions =
        permit_mynetworks
        reject_unauth_destination
        check_sender_access dbm:/etc/postfix/blocked_senders
        reject_rbl_client 67679988282.rbl.com

reject_unauth_destination prevent open relay, and should be used before
check_* when maps could return an OK (accidentally or not). it is also
cheap (compared to an rbl lookup, even if it's a local rbl).


PS. please do not top post. put your reply after the text you reply to.

> [snip]


Reply via email to