Re: How can I "reject_unverified_LOCAL_sender"?

2017-10-20 Thread Rick van Rein
Ah! >> I don't see how I can do this with Postfix, and it's not even simple in >> a policy due to the cyclic risk. What are others doing in this respect? > > /etc/postfix/main.cf > smtpd_reject_unlisted_sender = yes I mistook the documentation of this option to also work on external senders!

Re: How can I "reject_unverified_LOCAL_sender"?

2017-10-20 Thread Philip Paeps
On 2017-10-20 21:28:29 (+0200), Rick van Rein wrote: On 2017-10-20 21:17:26 (+0200), Philip Paeps wrote: On 2017-10-20 19:51:07 (+0200), Rick van Rein wrote: Wouldn't it be a lot easier simply to reject those with SPF? If you're seeing mail from one of your domains coming in from a host you

Re: How can I "reject_unverified_LOCAL_sender"?

2017-10-20 Thread Wietse Venema
Rick van Rein: > Hello, > > I see a lot of spam entering that claims to have come from a local > domain, usually guessing a non-existent account. I've been looking for > a way to "reject_unverified_local_sender", by which I mean that the > sender address is verified iff it occurs in virtual_alias

Re: How can I "reject_unverified_LOCAL_sender"?

2017-10-20 Thread Rick van Rein
Hi Philip, > Wouldn't it be a lot easier simply to reject those with SPF? If > you're seeing mail from one of your domains coming in from a host you > know couldn't have legitimately sent it, you can reject it outright. That would block not just the spam, but also legitimate bypassing through fo

Re: How can I "reject_unverified_LOCAL_sender"?

2017-10-20 Thread Philip Paeps
On 2017-10-20 19:51:07 (+0200), Rick van Rein wrote: I see a lot of spam entering that claims to have come from a local domain, usually guessing a non-existent account. I've been looking for a way to "reject_unverified_local_sender", by which I mean that the sender address is verified iff it o

How can I "reject_unverified_LOCAL_sender"?

2017-10-20 Thread Rick van Rein
Hello, I see a lot of spam entering that claims to have come from a local domain, usually guessing a non-existent account. I've been looking for a way to "reject_unverified_local_sender", by which I mean that the sender address is verified iff it occurs in virtual_alias_domains (and perhaps a few