From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <Dmitriy.Kruglikov@orionagro.com.ua>
Date: Wed, 21 Jun 2006 10:53:40 +0300
From: "Dmitriy L. Kruglikov" <Dmitriy.Kruglikov@orionagro.com.ua>
To: master@usib.irkps.ru,
	ALT Linux sysadmin discuss <sysadmins@lists.altlinux.org>
Message-ID: <20060621105340.57efbf41@shadow.orionagro.com.ua>
In-Reply-To: <e7arcc$q41$1@sea.gmane.org>
References: <20060620113539.GB8929@vladregion.ru>
	<20060620192354.GA10314@yust.work> <m3odwn3v8w.fsf@vvk.distance.ru>
	<e7arcc$q41$1@sea.gmane.org>
Organization: ORION AGRO
X-Mailer: Sylpheed-Claws 2.2.0cvs66 (GTK+ 2.8.17; i586-alt-linux-gnu)
Mime-Version: 1.0
Content-Type: text/plain; charset=KOI8-R
Content-Transfer-Encoding: 8bit
X-Virus-Scanned: amavisd-new at orionagro.com.ua
Subject: Re: [Sysadmins] spam?
X-BeenThere: sysadmins@lists.altlinux.org
X-Mailman-Version: 2.1.7
Precedence: list
Reply-To: ALT Linux sysadmin discuss <sysadmins@lists.altlinux.org>
List-Id: ALT Linux sysadmin discuss <sysadmins.lists.altlinux.org>
List-Unsubscribe: <https://lists.altlinux.org/mailman/listinfo/sysadmins>,
	<mailto:sysadmins-request@lists.altlinux.org?subject=unsubscribe>
List-Archive: <http://lists.altlinux.org/pipermail/sysadmins>
List-Post: <mailto:sysadmins@lists.altlinux.org>
List-Help: <mailto:sysadmins-request@lists.altlinux.org?subject=help>
List-Subscribe: <https://lists.altlinux.org/mailman/listinfo/sysadmins>,
	<mailto:sysadmins-request@lists.altlinux.org?subject=subscribe>
X-List-Received-Date: Wed, 21 Jun 2006 07:55:35 -0000
Archived-At: <http://lore.altlinux.org/sysadmins/20060621105340.57efbf41@shadow.orionagro.com.ua/>
List-Archive: <http://lore.altlinux.org/sysadmins/>

On Wed, 21 Jun 2006 16:10:04 +0900
Вадим Илларионов wrote:

> > /me спасаеццо sender verification-ом ...
> 
> А поподробней про это?

Пример из /etc/postfix/main.cf (не самый лучший :)
++++++
body_checks = regexp:/etc/postfix/body_checks
# 
# Insert to /etc/postfix/body_checks:
#            /^<iframe src=(3D)?cid:.* height=(3D)?0 width=(3D)?0>$/ 
#                REJECT IFRAME vulnerability exploit 
# 


strict_rfc821_envelopes = yes
disable_vrfy_command = yes

smtpd_delay_reject = yes

smtp_etrn_restrictions = permit_mynetworks,
 reject
 
smtpd_client_restrictions = hash:/etc/postfix/access,
 permit_mynetworks,
 reject_rbl_client blackholes.mail-abuse.org,
 reject_rbl_client dialups.mail-abuse.org,
 reject_rbl_client relays.ordb.org,
 reject_rbl_client dul.ru,
 reject_rbl_client opm.blitzed.org,
 reject_rbl_client list.dsbl.org,
 reject_rbl_client sbl.spamhaus.org,
 reject_rbl_client cbl.abuseat.org,
 reject_rbl_client dul.dnsbl.sorbs.net,
 reject_rbl_client dnsbl.njabl.org,
 reject_rbl_client dynablock.njabl.org,
 reject_rbl_client combined.njabl.org,
 permit
               
smtpd_helo_required = yes
smtpd_helo_restrictions = permit_mynetworks,
 check_helo_access hash:/etc/postfix/helo_check

smtpd_sender_restrictions = permit_mynetworks,
 reject_non_fqdn_sender,
 reject_unknown_sender_domain

smtpd_recipient_restrictions = permit_mynetworks,
 permit_sasl_authenticated,
 reject_unauth_pipelining,
 reject_non_fqdn_recipient,
 reject_unknown_recipient_domain,
 reject_unauth_destination,
 check_helo_access hash:/etc/postfix/helo_check
                       
smtpd_data_restrictions = permit_mynetworks,
 reject_unauth_pipelining,
 reject_non_fqdn_sender,
 reject_non_fqdn_recipient,
 reject_unknown_recipient_domain,
 reject_unknown_sender_domain,
 permit

header_checks = regexp:/etc/postfix/header_checks
++++++++++++++

Бывает, конечно, спам .... Но совсем не много ...



--
Best regards,
 Dmitriy L. Kruglikov                     .--.
 Dmitriy.Kruglikov_at_orionagro.com.ua   |@_@ |
 DKR6-RIPE                               |!_/ |
 ICQ# 13047326                          //   \ \
 XMPP:dkr6@jabber.ru                   (|     | )
                                      /'\_   _/`\
Powered by Linux                      \___)=(___/
 
-- Мысль --
То, что мы принимаем за благородство, нередко оказывается
переряженным честолюбием, которое, презирая мелкие выгоды, прямо
идет к крупным. -- Ларошфуко