Colega tienes errores en tu main.cf. Postfix como otros servicios lee de
arriva hacia abajo. si permites primero de nada te servira tener todas
esas reglas para denegar lo que no quieres que pase. como todo lo tienes
permitido. Tienes el Canal abierto. Compara lo que te mando con lo que
tienes y te daras cuenta Salu2 espero te sirva.
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain =
broken_sasl_auth_clients = yes
smtpd_sasl_security_options = noanonymous
smtpd_tls_auth_only = yes
smtpd_client_restrictions =
reject_sender_login_mismatch,
reject_authenticated_sender_login_mismatch,
reject_unauthenticated_sender_login_mismatch,
reject_unauth_destination,
permit_sasl_authenticated,
permit_mynetworks,reject
smtpd_sender_restrictions =
reject_unknown_recipient_domain,
reject_non_fqdn_sender,
reject_non_fqdn_recipient,
permit_sasl_authenticated,
permit_mynetworks,
reject
smtpd_recipient_restrictions =
reject_sender_login_mismatch,
reject_authenticated_sender_login_mismatch,
reject_unauthenticated_sender_login_mismatch,
reject_unknown_sender_domain,
reject_unknown_recipient_domain,
reject_non_fqdn_sender,
reject_non_fqdn_recipient,
reject_unlisted_recipient,
permit_mynetworks,
permit_sasl_authenticated,
reject_non_fqdn_helo_hostname,
reject_invalid_helo_hostname,
reject
El 2019-05-24 21:32, Rogelio Rodriguez escribió:
hola amigos, tengo dos postfix una relay y otro interno en la empresa,
el problema es que desde el relay no me rechaza los dominios
falseados, segurmatica me mando un correo donde se puso dominio
yahoo.es [1] y me estro como si nada, ademas en el interno yo me
cambio el domino por cualquiera que no sea el mio y los correo les
llega a los demas perfectamente. como puedo evitar esto?
main.cf [2] del relay
smtpd_helo_required = yes
smtpd_etrn_restrictions = reject
smtpd_data_restrictions = reject_unauth_pipelining,
reject_multi_recipient_bounce
smtpd_helo_restrictions = permit_mynetworks,
reject_invalid_helo_hostname
smtpd_sender_restrictions = permit_mynetworks,
reject_non_fqdn_recipient,
permit_sasl_authenticated,
reject_unauth_destination,
reject_unlisted_recipient,
reject_invalid_hostname,
reject_non_fqdn_hostname,
reject_non_fqdn_sender,
reject_unknown_sender_domain,
reject_rbl_client sbl-xbl.spamhaus.org [3],
reject_rbl_client bl.spamcop.net [4],
reject_rbl_client dnsbl.antispam.or.id [5],
permit
smtpd_relay_restrictions = check_sender_access
regexp:$filtros/remitentes_bloqueados,
permit_mynetworks,
permit_sasl_authenticated, defer_unauth_destination
smtpd_client_restrictions =
permit_sasl_authenticated,
permit_mynetworks,
#reject
# Evitando suplantacion la de identidad
restrictive = reject_sender_login_mismatch
permissive = permit
smtpd_restriction_classes = restrictive, permissive
smtpd_recipient_restrictions = permit_mynetworks,
permit_sasl_authenticated,
reject_unauth_destination,
reject_unknown_reverse_client_hostname,
reject_non_fqdn_recipient,
reject_unlisted_sender,
reject_invalid_hostname,
reject_non_fqdn_hostname,
reject_non_fqdn_sender,
reject_unknown_sender_domain,
reject_rbl_client sbl-xbl.spamhaus.org [3],
reject_rbl_client bl.spamcop.net [4],
reject_rbl_client dnsbl.antispam.or.id [5],
#reject_authenticated_sender_login_mismatch,
reject_unknown_recipient_domain,
check_policy_service inet:127.0.0.1:10023 [6]
reject_rbl_client dnsbl.sorbs.net [7],
#reject_rbl_client b.barracudacentral.org [8]
check_policy_service unix:private/policy-spf,
#reject
policy-spf_time_limit = 3600s
Links:
------
[1] http://yahoo.es
[2] http://main.cf
[3] http://sbl-xbl.spamhaus.org
[4] http://bl.spamcop.net
[5] http://dnsbl.antispam.or.id
[6] http://127.0.0.1:10023
[7] http://dnsbl.sorbs.net
[8] http://b.barracudacentral.org
_______________________________________________
Gutl-l mailing list -- gutl-l@listas.jovenclub.cu
To unsubscribe send an email to gutl-l-le...@listas.jovenclub.cu
--
Administrador de Red "Vocacional Máximo Gómez Báez"
(32)261702
" Si la vida te la la espalda, dale la espalda también "
Micky.
------------------------------------------------------
EL MINISTERIO DE EDUCACION SE PREPARA PARA CELEBRAR
EL 500 ANIVERSARIO DE LA HABANA, LA CAPITAL DE TODOS
LOS CUBANOS
16 de noviembre del 2019
www.mined.gob.cu
---------------------------------------------------
_______________________________________________
Gutl-l mailing list -- gutl-l@listas.jovenclub.cu
To unsubscribe send an email to gutl-l-le...@listas.jovenclub.cu
