On 2016-02-20 00:52, Sebastian Nielsen wrote:
1: REJECT tells the spammer "Hey, your spam got stuck in the spam
filter. Wanna try again?".
if thay do, so what ?, its not possible for spammers to make remote
administoring on postfix this would be in vain anyway, and the point on
discard is accepting more payloads on recieved data, where reject stop
the payloads
Better to DISCARD it so the spammer think they got the spam through,
then they won't switch to a new domain.
fair, but read above
I don't think anyone ever will receive legitimate mail from any of
those spammy TLDs listed in the rules file I gave.
this is another problem
2: Its just a habit, everytime some process complains of not able to
access a file, "666" is the universal solution.
what ?
are you sure root user is not enough for you then ?
Of course, this isn't
recommended in a web hosting setup, but if you're hosting for example
a mail server for a company, and only you as a sysadmin has shell
access to the server, its no danger 666'ing files that throw
permission errors. Then the file isn't really "world writable", since
only you have a account on the server anyways.
read access is bad in its own
Chmod the banned_tlds file to 666 to ensure the postfix process can
read it.
two annotations:
- I would not suggest DISCARD but REJECT
- mode 666 (world writable) is generally not needed. 644 is enough
or mode 640
and chgrp postfix, and still owned by root
possible spammers reads world files ? :=)
banned_tlds:
/\.bid$/ DISCARD
/\.top$/ DISCARD
can be a single pcre line