Thank you. The reason I do use DISCARD is that REJECT simply doesn't work. I tried, if I use REJECT, the spammer just switch to a new domain. I noticed I got a large amount of spam from, for example *@mediablueinc.ga, put a reject rule, then they started spamming from *@mediablueinc.com, And so on. I then changed into DISCARD and that actually works, the spam ceased, because the spammer won't notice they get blocked and switch to a new domain.
Yes, im using it in main.cf. It was just that I wanted to be sure that I didn't do something wrong so I block too much or too little. I had a hash: list before, but now I noticed they started spamming from certain TLD so I had to change into a pcre:. Best regards, Sebastian Nielsen -----Ursprungligt meddelande----- Från: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] För Bill Shirley Skickat: den 13 december 2015 05:58 Till: postfix-users@postfix.org Ämne: Re: Is this a correct way to define PCRE lists? I don't see anything "wrong". The default for .pcre is case independence. I use "REJECT Spam not allowed." instead of DISCARD. You're not escaping your period (\.com). You can combine some of these into a single rule: /mediablueinc\.(cf|com|ga)$/ REJECT Spam not allowed (1). /\.(top|ninja|download)$/ REJECT Spam not allowed (2). If you number them you'll see in the log file which rule matched. You have to use the table in main.cf. Something like: smtpd_recipient_restrictions = permit_mynetworks permit_sasl_authenticated check_sender_access pcre:/etc/postfix/my.tables/sender_access.pcre reject_rbl_client zen.spamhaus.org reject_rbl_client dnsbl.sorbs.net Bill On 12/12/2015 2:47 PM, Sebastian Nielsen wrote: > I have a check_sender_access to weed out spam from spam domains. > > The check_sender_access is a pcre: list. > > And the pcre list is: > > /mediablueinc.cf$/i DISCARD > > /mediablueinc.com$/i DISCARD > > /mediablueinc.ga$/i DISCARD > > /abstreeltg.eu$/i DISCARD > > /\.top$/i DISCARD > > (Yeah, the .top domain is a spam hole. Got over 100 spam mails from > that TLD with random words in the domain like psoraris-doctor.top and > so on, and I will never get a legit mail from that spam hole) > > Or are im doing something wrong? >
smime.p7s
Description: S/MIME Cryptographic Signature
