K bharathan a écrit :
> hi all
> on my smtp out i want to put ''reject_rbl_client  zen.spamhaus.org
> <http://zen.spamhaus.org>'' since many local ADSL dynamic ips are in PBL
> ; is it desirable?
> where i can put this? this relay machine does only sending out;

if this is "only out", then it should not accept mail except from
- trusted networks (mynetworks)
- trusted users (sasl authentication)
all the rest should get a reject. so it's

smtpd_recipient_restrictions =
        permit_mynetworks
        permit_sasl_authenticated
        reject

if this is an MX (a mail server that accepts mail from anywhere to few
domains), then

smtpd_recipient_restrictions =
        permit_mynetworks
        permit_sasl_authenticated
        reject_unauth_destination
        #reject_invalid_helo_hostname
        #reject_non_fqdn_helo_hostname
        reject_unlisted_recipient
        reject_unlisted_sender
        reject_rbl_client zen.spamhaus.org

Reply via email to