Am 18.04.2011 16:07, schrieb Carlos Mennens: > My <postmaster> default account is getting hammered with spam. I've > got SA / Amavisd-new working and tagging the messages as ***spam*** > however I've just re-configured SA to be a little more aggressive on > scoring the messages. My question to the Postfix group is if I can > configure a restriction in /etc/postfix directory to prevent repeat > offenders from sending email to me. Someone a few years ago on this > mailing list assisted me on configuring Postfix to use a > 'client_access' & 'client_access.db' file to block IP's as shown > below: > > 95.98.160.248 REJECT > 190.64.194.12 REJECT > > I've noticed that I am now getting spam emails from several different > hosts on one single network rather than from a particular host. Can I > block the entire network as follows: > > 95.98.* REJECT > > I'm sure many on the list wouldn't do this on their personal mail > server but I'm looking for a simple method that will stop the junk > mail. I know the 'client_access' flat file works fine but it's very > tedious to continuously add several IP's from the same network in when > I can simply blanket the entire network. If legit mail is blocked due > to this, I can review the rule at that time and see if it's safe to > lift the block or white-list that one particular client I.P.
an easy idea might be reject the postmaster account with additional message something like in a recipient access table postmas...@domain.my REJECT please use admin_at_domain_dot_my for sending us postmaster mail this will help quick, any human will read the bounce and resend meanwhile you should analyse youre logs and find out what best to do block the spam on smtp level, as there are many ways to it -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria
