On Sun, Apr 04, 2010 at 07:03:56PM -0600, Yves Dorfsman wrote:
> smtpd_helo_restrictions = reject_non_fqdn_hostname,  
> reject_invalid_hostname
>
> I will comment them out and see if it works. I suspect they
> don't do a lot in terms of fighting spam anyway.

This guess would be very wrong. reject_non_fqdn_helo_hostname (you 
are using deprecated syntax) is the single best low-cost antispam 
weapon in the arsenal. When I have checked, it seems to block around 
25% of all connections, and no known problems from using it.

Of course, I use it right. If I was going to have client submission 
on the same port, I would precede it with the appropriate permit_* 
restrictions as needed.

You might also benefit from consolidation of your restrictions into 
smtpd_recipient_restrictions. It's easier to understand what's going 
on that way.

Reference:
    http://www.postfix.org/SMTPD_ACCESS_README.html
-- 
    Offlist mail to this address is discarded unless
    "/dev/rob0" or "not-spam" is in Subject: header

Reply via email to