Re: blocking SPAM

From: Matt Armstrong (matt+)
Date: Thu Nov 01 2001 - 02:52:16 EST


Ronneil Camara <> writes:

> I just got maps_rbl_domains working. I just followed some howtos out there.
> Anyways, I tried sending an email from my office mail and yahoo to my mail
> server at home and this is what I got.
>
> --------------snippet starts----------
> Oct 31 22:43:06 cb446396-a postfix/smtpd[559]: connect from
> web12805.mail.yahoo.com[216.136.174.40]
> Oct 31 22:43:06 cb446396-a postfix/smtpd[559]: 9361246:
> client=web12805.mail.yahoo.com[216.136.174.40]
> Oct 31 22:43:07 cb446396-a postfix/smtpd[559]: reject: RCPT from
> web12805.mail.yahoo.com[216.136.174.40]: 554 Service unavailable;
> [216.136.174.40] blocked using outputs.orbs.org; from=<>
> to=<>
> Oct 31 22:43:12 cb446396-a postfix/smtpd[559]: disconnect from
> web12805.mail.yahoo.com[216.136.174.40]
> --------------snippet ends----------

Postfix was correct to bounce the mail, since you told it to use
outputs.orbs.org and outputs.orbs.org listed that mail server.

I just checked and it looks like it has been de-listed since then.

This is always a risk when using reject_maps_rbl -- you may lose
legitimate mail.

> Here is my config in main.cf:
>
> maps_rbl_domains = blackholes.mail-abuse.org, dialups.mail-abuse.org,
> relays.mail-abuse.org, bl.spamcop.net, inputs.orbz.org, outputs.orbs.org,
> relays.ordb.org, or.orbl.org
>
> disable_vrfy_command = yes
> reject_non_fqdn_hostname
> reject_non_fqdn_sender
> reject_non_fqdn_recipient
>
> smtpd_sender_restrictions = hash:/usr/local/etc/postfix/access,
> reject_unknown_sender_domain
> smtpd_recipient_restrictions = permit_mynetworks, reject_unauth_destination
> smtpd_client_restrictions = permit_mynetworks, reject_maps_rbl
>
> So, how would I fix that problem?

(looks like you had some copy/paste problems above...)

Options:

    - do nothing and accept the fact that using maps_rbl_domains may
      reject legitimate mail.

    - don't use outputs.orbs.org

    - make a special exception for 216.136.174.40 by...

        smtpd_client_restrictions =
            permit_mynetworks
            hash:/etc/postfix/maps_rbl_exceptions
            reject_maps_rbl

        Then create /etc/postfix/maps_rbl_exceptions with this line in it:

            216.136.174.40 OK

        Then run 'postmap /etc/postfix/maps_rbl_exceptions'
        Then run 'postfix reload'

-- 
matt
-
To unsubscribe, send mail to  with content
(not subject): unsubscribe postfix-users







Hosted Email Solutions

Invaluement Anti-Spam DNSBLs



Powered By FreeBSD   Powered By FreeBSD