Was lehnt ihr ab beim Einliefern von Mails?

[Jens Adam]

Fri, 11 Mar 2016 02:57:51 +0100
"Daniel" <daniel at ist-immer-online.de>:

> Was lehnt ihr ab beim Einliefern von Mails direkt ab im Postfix?

Im Prinzip alles was geht, inkl. reject_unknown_client_hostname:


smtpd_helo_required = yes
strict_rfc821_envelopes = yes
unknown_client_reject_code = 550
unknown_hostname_reject_code = 550
unknown_address_reject_code = 550

postscreen_access_list =
  permit_mynetworks
  cidr:/etc/postfix/chk_client.cidr
postscreen_blacklist_action = drop
postscreen_greet_action = drop
postscreen_dnsbl_action = enforce
postscreen_dnsbl_threshold = 3
postscreen_dnsbl_sites =
  zen.spamhaus.org*2
  spam.dnsbl.anonmails.de
  dnsbl-1.uceprotect.net
  safe.dnsbl.sorbs.net
  ix.dnsbl.manitu.net
  ubl.unsubscore.com
  psbl.surriel.com
  bl.spamcop.net
  dnsbl.inps.de
  hostkarma.junkemailfilter.com=127.0.0.2
  list.dnswl.org=127.0.[0..255].2*-2
  list.dnswl.org=127.0.[0..255].3*-5

smtpd_relay_restrictions =
  reject_unauth_pipelining
  reject_invalid_helo_hostname
  reject_non_fqdn_helo_hostname
  reject_non_fqdn_sender
  reject_non_fqdn_recipient
  reject_unlisted_sender
  reject_unknown_sender_domain
  reject_unknown_recipient_domain
  permit_mynetworks
  reject_unauth_destination
smtpd_recipient_restrictions =
  reject_unlisted_recipient
  permit_mynetworks
  check_client_access texthash:/etc/postfix/chk_client
  check_helo_access regexp:/etc/postfix/chk_helo
  check_sender_access regexp:/etc/postfix/chk_sender
  check_recipient_access regexp:/etc/postfix/chk_recipient
  reject_unknown_client_hostname
  reject_unknown_helo_hostname
smtpd_data_restrictions = reject_multi_recipient_bounce

header_checks = regexp:/etc/postfix/chk_header
mime_header_checks =
nested_header_checks =
body_checks = regexp:/etc/postfix/chk_body

-------------- nächster Teil --------------
Ein Dateianhang mit Binärdaten wurde abgetrennt...
Dateiname   : nicht verfügbar
Dateityp    : application/pgp-signature
Dateigröße  : 455 bytes
Beschreibung: Digitale Signatur von OpenPGP
URL         : <https://listi.jpberlin.de/pipermail/postfixbuch-users/attachments/20160311/0c2fb5c9/attachment.sig>