Re: Looking for Anti-spam setting: local username/external IP

2009-03-20 Thread Peter Blair
On Thu, Mar 19, 2009 at 3:28 PM, David A. Gershman
dagershman_...@dagertech.net wrote:
 from an external source.  I'm trying to see if there is a setting in
 master.cf (or other .cf file) which will reject any email from an
 external IP (other than my own) *and* is claiming to be from a local
 user account.

You'll block mail that was sent from your system, to an offsite
forward, which then redirects back to your system again.


Re: Looking for Anti-spam setting: local username/external IP

2009-03-20 Thread David A. Gershman
Yeah,  Thought of that a little after mailing.  Oh well, I guess I need
to keep my efforts in later defenses (spamassassin).

Thanks.

 On Thu, Mar 19, 2009 at 3:28 PM, David A. Gershman
 dagershman_...@dagertech.net wrote:
  from an external source.  I'm trying to see if there is a setting in
  master.cf (or other .cf file) which will reject any email from an
  external IP (other than my own) *and* is claiming to be from a local
  user account.
 
 You'll block mail that was sent from your system, to an offsite
 forward, which then redirects back to your system again.
 
 

---
David A. Gershman
gersh...@dagertech.net
http://dagertech.net/gershman/
It's all about the path! --d. gershman


Re: Looking for Anti-spam setting: local username/external IP

2009-03-20 Thread mouss
David A. Gershman a écrit :
 Yeah,  Thought of that a little after mailing.  Oh well, I guess I need
 to keep my efforts in later defenses (spamassassin).
 
 Thanks.
 
 On Thu, Mar 19, 2009 at 3:28 PM, David A. Gershman
 dagershman_...@dagertech.net wrote:
 from an external source.  I'm trying to see if there is a setting in
 master.cf (or other .cf file) which will reject any email from an
 external IP (other than my own) *and* is claiming to be from a local
 user account.
 You'll block mail that was sent from your system, to an offsite
 forward, which then redirects back to your system again.

unauthorized forwarding is less common today. so you can block mail
with a sender in your domain except for a list of authorized clients.

That said, until now, I have never needed such control. so use
zen.spamhaus.org, and let the rest go through spamassassin. only if you
think a lot of junk goes to spamassassin should you think of improving
your postfix defense. but then, show full headers.

PS. Please do not top post. if you don't understand what this means,
google...


Re: Looking for Anti-spam setting: local username/external IP

2009-03-19 Thread Magnus Bäck
On Thursday, March 19, 2009 at 20:28 CET,
 David A. Gershman dagershman_...@dagertech.net wrote:

 I've been getting spam messages passing through my server because they
 are from a local user account (spoofed).  However, the connection
 came from an external source.  I'm trying to see if there is a setting
 in master.cf (or other .cf file) which will reject any email from an
 external IP (other than my own) *and* is claiming to be from a local
 user account.

Assuming you mean envelope sender address when you say from:

main.cf:
smtpd_sender_restrictions =
permit_mynetworks,
permit_sasl_authenticated,
check_sender_access hash:/path/to/file

/path/to/file:
example.com REJECT

-- 
Magnus Bäck
mag...@dsek.lth.se