On Jul 30, 2024, at 16:52, Dimitris T. via Postfix-users <postfix-users@postfix.org> wrote: > > not sure why you don't just block the ip/subnet of that client in firewall > (?) or just try postscreen + postscreen_access_list with client ip/subnet..
I wouldn't expect IP-based blocking to work for long, as servers can change IP addresses. That's one of the reasons for the domain name system in the first place, isn't it? > is it coming from gmail or another too-big-to-block sender? > >> The "access" file currently contains REJECT lines for both "spamgateway.nil" >> (no leading period) and ".spamgateway.nil" (leading period), and I did the >> postmap-and-restart dance after updating it, but the e-mails are still >> coming through. My understanding (see also Wietse's first response) is that >> adding "stupidspammers.example" won't accomplish anything, as that domain is >> only in the message headers and isn't the domain of the actual server the >> e-mails are coming from. >> > > maybe this header_checks example works : > /^(To|From|Cc|Reply-To):.*@stupidspammers\.example/ DISCARD > postmap /etc/postfix/header_checks > and in main.cf : > header_checks = regexp:/etc/postfix/header_checks > postfix reload > should work.. I'll consider this solution. -- John Wodder _______________________________________________ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org
