Am 20.10.2012 18:01, schrieb Jeroen Geilman:
> On 10/20/2012 03:14 PM, Mike's unattended mail wrote:
>> On 2012-09-21, Mikkel Bang <facebookman...@gmail.com> wrote:
>>> What are these more intelligent, less crude techniques you talk about?
>>    * content analysis (high quality but computationally costly)
>>    * greylisting
>>
>> crude and sloppy cost-cutting approaches:
>>
>>    * dnsbl
>>    * reject_non_fqdn_helo_hostname
> 
> I am curious how you arrive at this blatantly provocative judgement.
> 
> DNSBLs are recommended  by just about everyone who is serious about
> email, and a proper EHLO is actually an RFC requirement.
> 
> This makes me wonder if it isn't you who represents some sort of
> ulterior agenda.
> 
> 

sometimes you have to face real world, so whitelisting has to be done
with some servers

perhaps do it like this

smtpd_helo_restrictions =
permit_mynetworks,
permit_sasl_authenticated,
...
check_client_access hash:/etc/postfix/whitelist_client_helo_hostname_access,
reject_invalid_hostname,
reject_non_fqdn_hostname,
check_helo_access hash:/etc/postfix/helo_access,
...
reject_unauth_pipelining

with i.e

/etc/postfix/helo_access
....
localhost                   REJECT i am  localhost myself
....


and yes youre right
rbls are a strong tool, but have to be choosen in a critical mind about
their special functions and relate your setup needs

combined with some other antispam stuff and selective setup
rbls are working fine ( which means less false postives )
so you might work with smtpd_restriction_classes

anyway checking logs and monitoring is daily postmaster work
you never will goal the ultimate mailserver setup ( so the subject is is
wrong anyway), in special
when you do mailhosting for other people, so your setup has to face
always the real needs of the day to provide best service you can,
so you have to jugde daily new what fits best to your needs these spamdays

searching postfix archives and www sites should be good enough finding
a good starting setup for postfix, if facing any problems
then ,the list is right place to ask


-- 
Best Regards
MfG Robert Schetterer

[*] sys4 AG

http://sys4.de, +49 (89) 30 90 46 64
Franziskanerstraße 15, 81669 München

Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263
Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer
Aufsichtsratsvorsitzender: Joerg Heidrich

Reply via email to