Re: avoiding externals spammesr that pretend to be in my domain

2010-12-20 Thread mouss 

Le 20/12/2010 15:49, Frank Bonnet a écrit :

Hello

I receive periodically some spams that pretend to be
from my domain.

Looking in emaila headers I can see where the email come from

Received: from 174.subnet222-124-154.static.astinet.telkom.net.id
(unknown [222.124.154.172])

Of course the header has been rewrited but is there a possibility with
postfix
to refuse that kind of emails that comes from an explicitly outer IP
address
but pretend to be in my domain ?



there are many many many things you can do.

- use one or more of
reject_rbl_client   zen.spamhaus.org
reject_rbl_client   bl.spamcop.net
reject_rbl_client   psbl.surriel.com

- reject any mail from
.astinet.telkom.net.id

- tell us if you're talking about envelope sender (mail from) or the 
from header.

...

Re: avoiding externals spammesr that pretend to be in my domain

2010-12-20 Thread Jeroen Geilman 

On 12/20/10 3:49 PM, Frank Bonnet wrote:

Hello

I receive periodically some spams that pretend to be from my domain.


If this is in the From: header, there's not much you can do about that.

The envelope sender you can trivially protect.
After you have allowed submission, and have passed $mynetworks, use a 
check_sender_access map to REJECT anything in your domain.




Looking in emaila headers I can see where the email come from

Received: from 174.subnet222-124-154.static.astinet.telkom.net.id 
(unknown [222.124.154.172])


Of course the header has been rewrited but is there a possibility with 
postfix
to refuse that kind of emails that comes from an explicitly outer IP 
address

but pretend to be in my domain ?

Thanks





--
J.

Re: avoiding externals spammesr that pretend to be in my domain

2010-12-20 Thread Ralf Hildebrandt 
* Frank Bonnet :
> Hello
> 
> I receive periodically some spams that pretend to be
> from my domain.
> 
> Looking in emaila headers I can see where the email come from
> 
> Received: from 174.subnet222-124-154.static.astinet.telkom.net.id
> (unknown [222.124.154.172])

http://www.spamhaus.org/query/bl?ip=222.124.154.172
use an DNSBL to filter out the crap

-- 
Ralf Hildebrandt
  Geschäftsbereich IT | Abteilung Netzwerk
  Charité - Universitätsmedizin Berlin
  Campus Benjamin Franklin
  Hindenburgdamm 30 | D-12203 Berlin
  Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962
  ralf.hildebra...@charite.de | http://www.charite.de

avoiding externals spammesr that pretend to be in my domain

2010-12-20 Thread Frank Bonnet 

Hello

I receive periodically some spams that pretend to be
from my domain.

Looking in emaila headers I can see where the email come from

Received: from 174.subnet222-124-154.static.astinet.telkom.net.id 
(unknown [222.124.154.172])


Of course the header has been rewrited but is there a possibility with 
postfix

to refuse that kind of emails that comes from an explicitly outer IP address
but pretend to be in my domain ?

Thanks