On Tue, Oct 07, 2008 at 10:17:41AM +0800, Marky Yehezkiel (SNC) wrote: > Oct 6 20:47:06 smtp2 postfix/smtpd[58410]: 8F625267977: > client=unknown[190.26.129.204] > > I want to make policy If source IP 190.26.129.204 and 90.183.38.135 with > port 25 is not open then postfix will reject the email.
Won't get any mail from most large sender domains with such a policy. High volume senders (including the one I am sending from) use separate hosts for inbound and outbound mail, and the outbound hosts don't have public port 25 listeners. This approach is not viable. Consider using zen.spamhaus.org instead (to block most illegitimate email emitting systems), and sign up for a paid rsync feed if your inbound volume is high enough. Consider adding greylisting, and content scoring systems such as SpamAssassin (perhaps via amavisd-new). A combination of systematic measures will work better than ad-hoc heuristics. -- Viktor. Disclaimer: off-list followups get on-list replies or get ignored. Please do not ignore the "Reply-To" header. To unsubscribe from the postfix-users list, visit http://www.postfix.org/lists.html or click the link below: <mailto:[EMAIL PROTECTED]> If my response solves your problem, the best way to thank me is to not send an "it worked, thanks" follow-up. If you must respond, please put "It worked, thanks" in the "Subject" so I can delete these quickly.