> > Anyway to restrict the From: header to the local domain as well as the > From<whitespace> header > > It seems that Majordomo will accept the mail if the From: is different > than the From > > >From mrbrk...@panix.com > > From: ru...@mrbrklyn.com > > I'd like to reject it at the mail server if either is spoofed and it is > not originating from my local hosts on the internal network. >
Actually, thing about this, that might not be a good idea and I doubt it is even in the envelope. Ruben > Ruben > > > > > > >smtpd_recipient_restrictions = > > >permit_mynetworks,reject_unauth_destination, reject_rbl_client > > >zen.spamhaus.org > > > > > >Will that do it? > > > > > >Ruben > > > > > > > While spamhaus is likely to block the majority of spam aimed at your > > server, it won't specifically reject mail claiming to be from your > > domain that isn't. > > > > If spamhaus doesn't block "enough" of the spam, you can tell postfix > > to reject mail claiming to be from unknown local sender addresses. > > Set in main.cf: > > smtpd_reject_unlisted_sender = yes > > > > or you can add a check_sender_access map to specifically reject your > > domain when mail isn't local. > > > > # WARNING this is likely to reject "some" legit mail > > # main.cf > > smtpd_recipient_restrictions = > > permit_mynetworks > > reject_unauth_destination > > check_sender_access hash:/etc/postfix/sender_access > > reject_rbl_client zen.spamhaus.org > > > > # /etc/postfix/sender_access > > example.com REJECT only for internal use > > > > to activate these changes you'll need to run > > # postmap sender_access > > # postfix reload > > > > -- Noel Jones > > -- > http://www.mrbrklyn.com - Interesting Stuff > http://www.nylxs.com - Leadership Development in Free Software -- http://www.mrbrklyn.com - Interesting Stuff http://www.nylxs.com - Leadership Development in Free Software So many immigrant groups have swept through our town that Brooklyn, like Atlantis, reaches mythological proportions in the mind of the world - RI Safir 1998 http://fairuse.nylxs.com DRM is THEFT - We are the STAKEHOLDERS - RI Safir 2002 "Yeah - I write Free Software...so SUE ME" "The tremendous problem we face is that we are becoming sharecroppers to our own cultural heritage -- we need the ability to participate in our own society." "> I'm an engineer. I choose the best tool for the job, politics be damned.< You must be a stupid engineer then, because politcs and technology have been attached at the hip since the 1st dynasty in Ancient Egypt. I guess you missed that one." © Copyright for the Digital Millennium
