Re: [Sysadmins] spam?

["Dmitriy L. Kruglikov" <Dmitriy.Kruglikov@orionagro.com.ua>]

On Wed, 21 Jun 2006 16:10:04 +0900
Вадим Илларионов wrote:

> > /me спасаеццо sender verification-ом ...
> 
> А поподробней про это?

Пример из /etc/postfix/main.cf (не самый лучший :)
++++++
body_checks = regexp:/etc/postfix/body_checks
# 
# Insert to /etc/postfix/body_checks:
#            /^<iframe src=(3D)?cid:.* height=(3D)?0 width=(3D)?0>$/ 
#                REJECT IFRAME vulnerability exploit 
# 


strict_rfc821_envelopes = yes
disable_vrfy_command = yes

smtpd_delay_reject = yes

smtp_etrn_restrictions = permit_mynetworks,
 reject
 
smtpd_client_restrictions = hash:/etc/postfix/access,
 permit_mynetworks,
 reject_rbl_client blackholes.mail-abuse.org,
 reject_rbl_client dialups.mail-abuse.org,
 reject_rbl_client relays.ordb.org,
 reject_rbl_client dul.ru,
 reject_rbl_client opm.blitzed.org,
 reject_rbl_client list.dsbl.org,
 reject_rbl_client sbl.spamhaus.org,
 reject_rbl_client cbl.abuseat.org,
 reject_rbl_client dul.dnsbl.sorbs.net,
 reject_rbl_client dnsbl.njabl.org,
 reject_rbl_client dynablock.njabl.org,
 reject_rbl_client combined.njabl.org,
 permit
               
smtpd_helo_required = yes
smtpd_helo_restrictions = permit_mynetworks,
 check_helo_access hash:/etc/postfix/helo_check

smtpd_sender_restrictions = permit_mynetworks,
 reject_non_fqdn_sender,
 reject_unknown_sender_domain

smtpd_recipient_restrictions = permit_mynetworks,
 permit_sasl_authenticated,
 reject_unauth_pipelining,
 reject_non_fqdn_recipient,
 reject_unknown_recipient_domain,
 reject_unauth_destination,
 check_helo_access hash:/etc/postfix/helo_check
                       
smtpd_data_restrictions = permit_mynetworks,
 reject_unauth_pipelining,
 reject_non_fqdn_sender,
 reject_non_fqdn_recipient,
 reject_unknown_recipient_domain,
 reject_unknown_sender_domain,
 permit

header_checks = regexp:/etc/postfix/header_checks
++++++++++++++

Бывает, конечно, спам .... Но совсем не много ...



--
Best regards,
 Dmitriy L. Kruglikov                     .--.
 Dmitriy.Kruglikov_at_orionagro.com.ua   |@_@ |
 DKR6-RIPE                               |!_/ |
 ICQ# 13047326                          //   \ \
 XMPP:dkr6@jabber.ru                   (|     | )
                                      /'\_   _/`\
Powered by Linux                      \___)=(___/
 
-- Мысль --
То, что мы принимаем за благородство, нередко оказывается
переряженным честолюбием, которое, презирая мелкие выгоды, прямо
идет к крупным. -- Ларошфуко