sebaik nya sih konfigurasi itu di nonaktifin aja ..pelangamanan saya kalo
itu di aktifin justru false positif lebih banyak,
bisa di compare dengan salah satu konfigurasi anti spam postfix saya nih
...ini hanya untuk incoming mail dari internet tidak di gunakan buat
outgoing, dan saya menggunakan amavis untuk frame work AV dan antispam nya,
serta spamassasin + plugins plugins lainnya, anti virus menggunakan free
bitdefender for linux dan clam av sebagai secondary AV
untuk penggunaan RBL sebaikk nya di tes- tes list nya, menggunakan script
pflogsumm.pl, berapa yang bisa di reject, saya pernah test beberapa RBL,
ternyata yang saya gunakan sekarang ini paling baik, tapi tolong kalo
ada yang pengalaman, mohon bisa di kasih masukan juga apakah konfigursi
saya masih ada yang kurang
# AntiUCE
smtpd_helo_required = yes
disable_vrfy_command = yes
message_size_limit = 5120000
smtpd_recipient_restrictions =
permit_mynetworks
reject_unauth_destination
reject_unlisted_recipient
#Whitelist/Blacklist
check_client_access hash:/etc/postfix/client_access
check_helo_access hash:/etc/postfix/helo_access
check_sender_access hash:/etc/postfix/sender_access
#reject_unknown_client
#reject_non_fqdn_hostname
#reject_unknown_hostname
reject_invalid_hostname
reject_unauth_pipelining
reject_non_fqdn_sender
reject_unknown_sender_domain
reject_rhsbl_sender dsn.rfc-ignorant.org
reject_rbl_client dnsbl.sorbs.net
reject_rbl_client dnsbl.njabl.org
reject_rbl_client sbl-xbl.spamhaus.org
reject_rbl_client bl.spamcop.net
#reject_rbl_client relays.ordb.org
#AMAVIS
content_filter = smtp-amavis:[localhost]:10024
# check_recipient_access hash:/etc/postfix/maps/recipient_access
From: "Legowo Widyanto" <[EMAIL PROTECTED]>
To: <tanya-jawab@linux.or.id>
Sent: Tuesday, June 05, 2007 4:31 PM
Subject: [tanya-jawab] Address verification
hallo semuanya...mo tanya neh...
saya punya postfix sebagai mailgateway/relay...
kenapa ya kalo mail server penerima menggunakan "sender address
verification", gagal men-probe address email2 yg ada di kita ?
thk ya ?
legowo
postconf -n
alias_database = hash:/etc/postfix/aliases
alias_maps = hash:/etc/postfix/aliases
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = smtp-amavis:[localhost]:10024
daemon_directory = /usr/libexec/postfix
debug_peer_level = 2
disable_vrfy_command = yes
header_checks = regexp:/etc/postfix/header_checks
local_recipient_maps =
local_transport = error:local mail delivery is disabled on this machine
mail_owner = postfix
mailq_path = /usr/bin/mailq
message_size_limit = 10485760
mydestination =
mydomain = marein-re.com
myhostname = mailgw.marein-re.com
mynetworks = xxx.xxx.xxx.xxx/xx, xxx.xxx.xxx.xxx/x, xxx.xxx.xxx.xxx/xx
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases
queue_directory = /var/spool/postfix
relay_domains = $mydomain
relay_recipient_maps = hash:/etc/postfix/relay_users
sendmail_path = /usr/sbin/sendmail
smtp_discard_ehlo_keyword_address_maps = hash:/etc/postfix/no_pipelining
smtpd_client_restrictions = check_client_access
hash:/etc/postfix/client_access, reject_rbl_client sbl.spamhaus.org,
reject_rbl_client relays.ordb.org, reject_rbl_client opm.blitzed.org,
reject_rbl_client list.dsbl.org, reject_rbl_client cbl.abuseat.org,
reject_rbl_client dul.dnsbl.sorbs.net
smtpd_helo_required = yes
smtpd_recipient_restrictions = reject_non_fqdn_recipient,
reject_unknown_recipient_domain, permit_mynetworks,
reject_unauth_destination, check_recipient_access
hash:/etc/postfix/recipient_access
smtpd_sender_restrictions = check_sender_access
hash:/etc/postfix/sender_access, reject_non_fqdn_sender,
reject_unknown_sender_domain, reject_rhsbl_sender relays.ordb.org,
reject_rhsbl_sender opm.blitzed.org
transport_maps = hash:/etc/postfix/transport
virtual_alias_maps = hash:/etc/postfix/virtual
log-nya :
The Postfix program
<[EMAIL PROTECTED]>: host xxx.ABC.com[xxx.xxx.xxx.xxx] said:
550-Verification failed for <[EMAIL PROTECTED]>
550-Previous
(cached) callout verification failure 550-Sender verification failed
(Sending test bounce to 550 [EMAIL PROTECTED] failed). (in
reply to RCPT TO command)
---------------------------------------------------------------------------------------------
+++++++++++++++++++ Scanned by our internal antivirus
+++++++++++++++++++
---------------------------------------------------------------------------------------------
--
FAQ milis di http://wiki.linux.or.id/FAQ_milis_tanya-jawab
Unsubscribe: kirim email ke [EMAIL PROTECTED]
Arsip dan info milis selengkapnya di http://linux.or.id/milis
--
FAQ milis di http://wiki.linux.or.id/FAQ_milis_tanya-jawab
Unsubscribe: kirim email ke [EMAIL PROTECTED]
Arsip dan info milis selengkapnya di http://linux.or.id/milis
