Re: Blocking Hotmail
Benny Pedersen schrieb: On Thu, July 30, 2009 16:50, Rodman Frowert wrote: I wish there was a message board on the Postfix main site instead of JUST the mailing list. Would making find things that are asked a lot quite easier. Some of the mailing list archives don't have search functions... reject spf softfail, fail, neotral aswell on spf pass check sender in squirrelmail addressbook is known if yes accept else reject, how to make it work is up to others for yahoo i check it with postfwd to match if client_name match sender_domain, if not reject lack of spf force me to this :) you can do it also i.e like this or simular, there is a english description in www which describes a few equal ways with smtpd_restriction_classes, sorry couldnt find the url, i have also some kind of it in my setup which works well since years this is from http://chains.ch/docs/postfix-UCE-HOWTO-de.html which shows the general way for using ( havent controlled it deeply ) smtpd_restriction_classes = freemail_hotmail freemail_msn freemail_yahoo freemail_hotmail = check_client_access pcre:/etc/postfix/maps/freemail_hotmail freemail_msn = check_client_access pcre:/etc/postfix/maps/freemail_msn freemail_yahoo = check_client_access pcre:/etc/postfix/maps/freemail_yahoo /etc/postfix/maps/freemail_check hotmail.comfreemail_hotmail msn.comfreemail_msn yahoo.com freemail_yahoo smtpd_recipient_restrictions = [..] check_sender_access hash:/etc/postfix/maps/freemail_check, [..] /(^|\.)provider\.tld$/ DUNNO /./ REJECT You claim to be from provider.tld but your mail didn't come from a provider.tld server. -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria
Re: Blocking Hotmail
On Thu, July 30, 2009 16:50, Rodman Frowert wrote: I wish there was a message board on the Postfix main site instead of JUST the mailing list. Would making find things that are asked a lot quite easier. Some of the mailing list archives don't have search functions... reject spf softfail, fail, neotral aswell on spf pass check sender in squirrelmail addressbook is known if yes accept else reject, how to make it work is up to others for yahoo i check it with postfwd to match if client_name match sender_domain, if not reject lack of spf force me to this :) -- xpoint
Blocking Hotmail
I am getting quite a bit of SPAM coming from Hotmail. Instead of using verify to check and see if they are legit senders, I think I would rather just block them and be done with it. Maybe after a few months of my server not responding to Spammer garbage, I will be removed from their SPAM lists and I could then remove the block. What would be the appropriate command to simply reject this domain? Rodman
Re: Blocking Hotmail
What would be the appropriate command to simply reject this domain? I'd google for: postfix block domains The first result I would get is: http://www.linuxquestions.org/questions/linux-server-73/how-to-block-domains-postfix-684924/ HTH Regards, Serge Fonville
Re: Blocking Hotmail
Thanks! I did a search on the Postfix main site for block but didn't get any results. I wish there was a message board on the Postfix main site instead of JUST the mailing list. Would making find things that are asked a lot quite easier. Some of the mailing list archives don't have search functions... Rodman - Original Message - From: Serge Fonville serge.fonvi...@gmail.com To: postfix postfix-users@postfix.org Sent: Thursday, July 30, 2009 9:37 AM Subject: Re: Blocking Hotmail What would be the appropriate command to simply reject this domain? I'd google for: postfix block domains The first result I would get is: http://www.linuxquestions.org/questions/linux-server-73/how-to-block-domains-postfix-684924/ HTH Regards, Serge Fonville
Re: Blocking Hotmail
Rodman Frowert schrieb: Thanks! I did a search on the Postfix main site for block but didn't get any results. block is a very universe ( in german it can be a big stone , or it may row of uniform houses etc *g) therefore search REJECT which is the right tec description I wish there was a message board on the Postfix main site instead of JUST the mailing list. Would making find things that are asked a lot quite easier. Some of the mailing list archives don't have search functions... Rodman - Original Message - From: Serge Fonville serge.fonvi...@gmail.com To: postfix postfix-users@postfix.org Sent: Thursday, July 30, 2009 9:37 AM Subject: Re: Blocking Hotmail What would be the appropriate command to simply reject this domain? I'd google for: postfix block domains The first result I would get is: http://www.linuxquestions.org/questions/linux-server-73/how-to-block-domains-postfix-684924/ HTH Regards, Serge Fonville -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria
Re: Blocking Hotmail
You're welcome! Well, Google is your friend Probably more than any other non-human resource And very often it is faster as well In my experience, mailing lists, are more of a 'last resort' If you want a postfix forum, I'd say, start one Just my 2ct Regards, Serge Fonville On Thu, Jul 30, 2009 at 4:50 PM, Rodman Frowertrod...@shellport.com wrote: Thanks! I did a search on the Postfix main site for block but didn't get any results. I wish there was a message board on the Postfix main site instead of JUST the mailing list. Would making find things that are asked a lot quite easier. Some of the mailing list archives don't have search functions... Rodman - Original Message - From: Serge Fonville serge.fonvi...@gmail.com To: postfix postfix-users@postfix.org Sent: Thursday, July 30, 2009 9:37 AM Subject: Re: Blocking Hotmail What would be the appropriate command to simply reject this domain? I'd google for: postfix block domains The first result I would get is: http://www.linuxquestions.org/questions/linux-server-73/how-to-block-domains-postfix-684924/ HTH Regards, Serge Fonville
Re: Blocking Hotmail
Original-Nachricht Datum: Thu, 30 Jul 2009 09:31:13 -0500 Von: Rodman Frowert rod...@shellport.com An: postfix-users@postfix.org Betreff: Blocking Hotmail I am getting quite a bit of SPAM coming from Hotmail. Instead of using verify to check and see if they are legit senders, I think I would rather just block them and be done with it. Maybe after a few months of my server not responding to Spammer garbage, I will be removed from their SPAM lists and I could then remove the block. From my experience in the past years the chance that a block will help to remove your address from their distribution list is +/- equal to zero. Are those mails really coming from Hotmail servers or is just the sender claiming to be from Hotmail? If the later then I strongly advise you to read the Postfix Anti-UCE Cheat Sheet and implement their suggestion for stopping forged freemail. What would be the appropriate command to simply reject this domain? Rodman Steve -- GRATIS für alle GMX-Mitglieder: Die maxdome Movie-FLAT! Jetzt freischalten unter http://portal.gmx.net/de/go/maxdome01
Re: Blocking Hotmail
On Thursday 30 July 2009 09:31:13 Rodman Frowert wrote: I am getting quite a bit of SPAM coming from Hotmail. Instead of using verify to check and see if they are legit senders, I think I would rather just block them and be done with it. Maybe after a few months of my server not responding to Spammer garbage, I will be removed from their SPAM lists and I could then remove the block. Don't hold your breath. Spammers have no need to clean up their lists. What would be the appropriate command to simply reject this domain? Simply is not applicable in this context. You haven't phrased the question in such a way that there could be a simple Postfix answer. See http://www.postfix.org/SMTPD_ACCESS_README.html and access.5.html and decide how you're going to identify that mail. I think Hotmail and MSN send from *.hotmail.com. hosts, so you could use that in a check_client_access lookup. Since that relies on reverse DNS, you should also consider reject_unknown_reverse_client_hostname, which rejects hosts with no PTR (pretty safe), and will defer any hosts if your own nameserver fails for some reason. Generally I would not recommend using check_sender_access, because the sender address can be and usually is false. However in this case, you wouldn't be doing any more damage than you already are, and this would prevent the occasional reverse DNS failure from slipping through. That is your simplest answer. Of course, all of these simple answers require a good understanding of smtpd_*_restrictions. And for the record, I looked at the LQ link that Serge found in Google, and it's not correct. Those who use Google before reading the Postfix documentation are often disappointed. In your case, you tried, but you didn't know the right keywords. You'll have better results next time by browsing the documentation.html page, looking at the various README names. BTW all of the HTML documentation is (or should be!) in your own local $(postconf -h html_directory). Use of your local copy is best for several reasons, chief among those being that it is specific to and up-to-date for your own Postfix version. You won't have to watch for those little version-specific notes. One last comment I'll add: I agree with Steve in that you will find this tactic to be an overall ineffective measure against spam. You *will* block some spam with this ... Hotmail leaks badly having been targeted for abuse by 419 scammers in particular. -- Offlist mail to this address is discarded unless /dev/rob0 or not-spam is in Subject: header
