Re: block spam mail from lan

2013-05-11 Thread Stan Hoeppner
On 5/11/2013 7:34 AM, Pol Hallen wrote: >> And the most effective countermeasure to spam originating from devices >> on the LAN has nothing to do with Postfix. As most spamware in the wild >> today still attempts to send direct-to-MX, simply creating a TCP 25 >> egress filter at your edge router/f

Re: block spam mail from lan

2013-05-11 Thread Benny Pedersen
Stan Hoeppner skrev den 2013-05-10 21:25: This simply means creating a rule to drop all outbound TCP 25 connections except those originating from the IP of your Postfix MTA. or make DNAT iptables rule so all outgoing port 25 will go to lan postfix server on port 25 not remote deliver to mx :)

Re: block spam mail from lan

2013-05-11 Thread Benny Pedersen
Pol Hallen skrev den 2013-05-10 19:45: Hi folks! I'm newbie and I study postfix What I should be use to (check) and block attempt spam from my lan to internet? remove permit_mynetworks ?, so all need to use smtp auth via sasl, if you still see spam going out, you knwo what auth to close --

Re: block spam mail from lan]

2013-05-11 Thread Pol Hallen
> How about how offensive and rude it is to post to a public mailing list from a domain named "fuckaround.org"? Don't bother replying, you've already been blacklisted. offensive? offensive for who? It'a a name like another. It's a "nice" name to test my server. My ip is not blacklisted and thank

Re: block spam mail from lan

2013-05-11 Thread li...@rhsoft.net
Am 11.05.2013 14:34, schrieb Pol Hallen: > I don't understand. > > Situation: A real user using browser connect to squirrelmail and send a > mail. It's ok. > > But if this user create a mail bomb using squirrelmail how way to spam I > can have this problem well, nothing can really prevent you fr

Re: block spam mail from lan

2013-05-11 Thread Pol Hallen
> And the most effective countermeasure to spam originating from devices > on the LAN has nothing to do with Postfix. As most spamware in the wild > today still attempts to send direct-to-MX, simply creating a TCP 25 > egress filter at your edge router/firewall will give the best bang for > the bu