Velvet Pixel wrote:
On Jul 30, 2008, at 12:37 AM, MrC wrote:
Isn't mail fun.
YEAH! :)
Post output from postconf -n and you'll get lots of good feedback about
how to configure your anti-spam measures.
MrC
Here is my postconf output:
# postconf -n
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/libexec/postfix
debug_peer_level = 2
home_mailbox = Maildir/
html_directory = no
mailbox_command = /usr/bin/procmail-wrapper -o -a $DOMAIN -d $LOGNAME
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
mydestination = $myhostname, localhost.$mydomain, localhost,
vps.velvetpixel.net
newaliases_path = /usr/bin/newaliases.postfix
qmgr_message_active_limit = 4000
readme_directory = /usr/share/doc/postfix-2.3.3/README_FILES
sample_directory = /usr/share/doc/postfix-2.3.3/samples
sender_bcc_maps = hash:/etc/postfix/bcc
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
smtpd_recipient_restrictions = permit_mynetworks
permit_sasl_authenticated reject_unauth_destination
smtpd_sasl_auth_enable = yes
unknown_local_recipient_reject_code = 550
virtual_alias_maps = hash:/etc/postfix/virtual
you could start from something like:
smtpd_recipient_restrictions =
permit_mynetworks
permit_sasl_authenticated
reject_unauth_destination
reject_non_fqdn_sender
reject_non_fqdn_recipient
reject_invalid_helo_hostname
warn_if_reject reject_non_fqdn_helo_hostname
reject_unlisted_recipient
reject_unlisted_sender
reject_rbl_client zen.spamhaus.org
reject_non_fqdn_helo_hostname may reject mail from misconfigured sites.
try it with the warn_if_reject first (so that it logs a warning instead
of rejecting).
