Good morning all, Over the last couple of days I've been at work trying to secure my postfix mail-server. It's a small private e-mail server.
I've used http://jimsun.linxnet.com/misc/postfix-anti-UCE.txt as a guide and I see that a lot of spam is rejected at the gate (before it is handled by spamassassin). The only thing that I cannot get to work is rejecting multiple recipients in the to: or cc: field that are not for my domain. I've setup header-checks to limit the number of recipients to 5 but I still see the following in my mail-log: postfix/smtpd[27920]: connect from col0-omc2-s8.col0.hotmail.com[65.55.34.82] postfix/smtpd[27920]: 7CA961CA6F2: client=col0-omc2-s8.col0.hotmail.com[65.55.34.82] postfix/cleanup[27929]: 7CA961CA6F2: message-id=<col117-w30ed22a833cbbb9530b31c92...@phx.gbl> postfix/qmgr[1156]: 7CA961CA6F2: from=<**spamme...@hotmail.com>, size=7329, nrcpt=1 (queue active) postfix/smtpd[27920]: disconnect from col0-omc2-s8.col0.hotmail.com[65.55.34.82] postfix/pickup[21986]: 3D1861CA700: uid=1003 from=<**spamme...@hotmail.com> postfix/cleanup[27929]: 3D1861CA700: message-id=<col117-w30ed22a833cbbb9530b31c92...@phx.gbl> postfix/pipe[27930]: 7CA961CA6F2: to=<b...@**mydomain**.net>, relay=spamfilter, delay=5, status=sent (mail.**mydomain**) postfix/qmgr[1156]: 3D1861CA700: from=<**spamme...@hotmail.com>, size=9760, nrcpt=2 (queue active) postfix/lmtp[27951]: 3D1861CA700: to=<b...@**mydomain**.net>, relay=/tmp/lmtp[/tmp/lmtp], delay=0, status=sent (250 2.1.5 Ok) postfix/smtp[27949]: 3D1861CA700: to=<b...@**other domain**.nl>, relay=**external mailserver**[77.94.249.33], delay=1, status=sent (250 2.0.0 Ok: queued as 8241D3948C6) So my questions are: - Am I allowed to prevent the relaying of this message to the external mailserver, or will this break my e-mail configuration? - How do I prevent this? Is there an option in my configuration I should take a look at? - Am I missing something? Any help on this is highly appreciated. Regards, Bas van Reeuwijk. ----------------------------------------- This email was sent using SquirrelMail. "Webmail for nuts!" http://squirrelmail.org/
