I'm getting hit pretty hard with spam, and was hoping to reduce it a
bit by adding the following smtpd restrictions:

smtpd_helo_restrictions = reject_invalid_helo_hostname,
reject_non_fqdn_helo_hostname
smtpd_sender_restrictions = reject_non_fdqn_sender

Is that safe to do?

My current smtpd restrictions are:
smtpd_recipient_restrictions = permit_mynetworks,
permit_sasl_authenticated, reject_unauth_destination,
reject_unlisted_recipient, reject_unlisted_sender

And my postfix -n, if it helps:
config_directory = /etc/postfix
home_mailbox = .maildir/
mydestination = localhost $myhostname localhost.$mydomain $mydomain
example.net example.com
mynetworks = 127.0.0.0/8
myorigin = $mydomain
sender_dependent_relayhost_maps = hash:/etc/postfix/sender_relay
smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
smtp_sasl_security_options = noanonymous
smtp_sender_dependent_authentication = yes
smtp_tls_CApath = /etc/ssl/certs
smtp_tls_security_level = may
smtpd_recipient_restrictions = permit_mynetworks,
permit_sasl_authenticated, reject_unauth_destination,
reject_unlisted_recipient, reject_unlisted_sender
smtpd_sasl_auth_enable = yes
smtpd_sasl_path = private/auth
smtpd_sasl_type = dovecot
smtpd_tls_CAfile = /etc/ssl/postfix/cacert.pem
smtpd_tls_auth_only = yes
smtpd_tls_cert_file = /etc/ssl/postfix/cert.pem
smtpd_tls_key_file = /etc/ssl/postfix/key.pem
smtpd_tls_security_level = may

Thanks.

Reply via email to