Re: Blocking TLDs

2023-02-18 Thread Matus UHLAR - fantomas
08.02.2023 12:14, Viktor Dukhovni wrote: .. /etc/postfix/sender-access: top REJECT I employ crude anti-spam measures .topREJECT I employ crude anti-spam measures On 18.02.23 09:34, Michael Tokarev wrote: I wonder how effective to block just the TLDs. I guess it is z

Re: Blocking TLDs

2023-02-17 Thread Michael Tokarev
08.02.2023 12:14, Viktor Dukhovni wrote: .. /etc/postfix/sender-access: top REJECT I employ crude anti-spam measures .topREJECT I employ crude anti-spam measures I wonder how effective to block just the TLDs. I guess it is zero, no? I *guess* foo@top shouldn't re

Re: Blocking TLDs

2023-02-16 Thread Wietse Venema
James Pifer: > On 2/16/2023 9:56 AM, Wietse Venema wrote: > > James Pifer: > >> On 2/16/2023 9:21 AM, Viktor Dukhovni wrote: > >>> Don't forget set an empty: > >>> > >>> parent_domain_matches_subdomains = > >>> > >> Where should that go exactly? > > In main.cf. > > > > Wietse > > I shoul

Re: Blocking TLDs

2023-02-16 Thread James Pifer
On 2/16/2023 9:56 AM, Wietse Venema wrote: James Pifer: On 2/16/2023 9:21 AM, Viktor Dukhovni wrote: Don't forget set an empty: parent_domain_matches_subdomains = Where should that go exactly? In main.cf. Wietse I should have been more specific. Where in main.cf should it g

Re: Blocking TLDs

2023-02-16 Thread Wietse Venema
James Pifer: > On 2/16/2023 9:21 AM, Viktor Dukhovni wrote: > > Don't forget set an empty: > > > > parent_domain_matches_subdomains = > > > > Where should that go exactly? In main.cf. Wietse

Re: Blocking TLDs

2023-02-16 Thread James Pifer
On 2/16/2023 9:21 AM, Viktor Dukhovni wrote: On Thu, Feb 16, 2023 at 08:23:00AM -0500, James Pifer wrote: Anyone see anything wrong with it or have other suggestions? smtpd_recipient_restrictions =     check_client_access inline:{     { 107.182.131   = REJECT This mail serv

Re: Blocking TLDs

2023-02-16 Thread Viktor Dukhovni
On Thu, Feb 16, 2023 at 08:23:00AM -0500, James Pifer wrote: > Anyone see anything wrong with it or have other suggestions? > > smtpd_recipient_restrictions = >     check_client_access inline:{ >     { 107.182.131   = REJECT This mail server rejects mail > from the 107.182.131.

Re: Blocking TLDs

2023-02-16 Thread James Pifer
On 2/8/2023 1:13 PM, James Pifer wrote: On 2/8/2023 1:02 PM, Jaroslaw Rafa wrote: Dnia  8.02.2023 o godz. 12:55:58 James Pifer pisze: I would prefer to quarantine rather than reject, if I can figure out how to do that. I would at least be able to look through them periodically and see if someth

Re: Blocking TLDs

2023-02-08 Thread postfix
dnf -y install postfix-pcre It was added later, but by then I had already converted to regex. FYI: I was given the impression that pcre has better performance than regex in postfix, if that is something relevant to you.

Re: Blocking TLDs

2023-02-08 Thread mailmary
It was added later, but by then I had already converted to regex. On Wed, 08 Feb 2023 11:34:49 -0500 post...@ptld.com wrote: > > Since I'm using AlmaLinux, a derivative of RHEL, it does not have PCRE > > because Redhat decided to remove it entirely from RHEL. > > Thus, I had to convert all m

Re: Blocking TLDs

2023-02-08 Thread James Pifer
On 2/8/2023 1:02 PM, Jaroslaw Rafa wrote: Dnia 8.02.2023 o godz. 12:55:58 James Pifer pisze: I would prefer to quarantine rather than reject, if I can figure out how to do that. I would at least be able to look through them periodically and see if something is legit. I suddenly started getting

Re: Blocking TLDs

2023-02-08 Thread Jaroslaw Rafa
Dnia 8.02.2023 o godz. 12:55:58 James Pifer pisze: > I would prefer to quarantine rather than reject, if I can figure out > how to do that. I would at least be able to look through them > periodically and see if something is legit. > > I suddenly started getting these (.store,.shop, etc) a could

Re: Blocking TLDs

2023-02-08 Thread James Pifer
On 2/8/2023 12:37 PM, Rob McGee wrote: On 2/8/2023 3:14 AM, Viktor Dukhovni wrote: On Wed, Feb 08, 2023 at 10:00:14AM +0200, mailm...@ionos.gr wrote: /\.top$/ REJECT /\.xyz$/ REJECT /\.cam$/ REJECT /\.fun$/ REJECT /\.buzz$/ REJECT /\.club$/ REJECT /\.link$/ REJECT /\.hinet\.net$/ REJECT Why

Re: Blocking TLDs

2023-02-08 Thread Rob McGee
On 2/8/2023 3:14 AM, Viktor Dukhovni wrote: On Wed, Feb 08, 2023 at 10:00:14AM +0200, mailm...@ionos.gr wrote: /\.top$/ REJECT /\.xyz$/ REJECT /\.cam$/ REJECT /\.fun$/ REJECT /\.buzz$/ REJECT /\.club$/ REJECT /\.link$/ REJECT /\.hinet\.net$/ REJECT Why everyone feels they need regular express

Re: Blocking TLDs

2023-02-08 Thread postfix
Since I'm using AlmaLinux, a derivative of RHEL, it does not have PCRE because Redhat decided to remove it entirely from RHEL. Thus, I had to convert all my "pcre:" into "regexp:", like the above. I'm using a similar flavor of RHEL and dnf -y install postfix-pcre worked for me. Is that p

Re: Blocking TLDs

2023-02-08 Thread James Pifer
On 2/8/2023 8:32 AM, Wietse Venema wrote: James Pifer: The error was: Feb? 8 07:38:11 mailserver postfix/smtpd[446839]: NOQUEUE: reject: RCPT from mail-qt1-f179.google.com[209.85.160.179]: 451 4.3.5 Server configuration error; from= to= proto=ESMTP helo= The cause of the problem was logged IMME

Re: Blocking TLDs

2023-02-08 Thread natan
Hi Before add sender-acces works fine ? Can you send output postconf -m ? W dniu 8.02.2023 o 14:15, James Pifer pisze: On 2/8/2023 4:14 AM, Viktor Dukhovni wrote: On Wed, Feb 08, 2023 at 10:00:14AM +0200, mailm...@ionos.gr wrote: /\.top$/ REJECT /\.xyz$/ REJECT /\.cam$/ REJECT /\.fun$/ REJEC

Re: Blocking TLDs

2023-02-08 Thread Wietse Venema
James Pifer: > The error was: > Feb? 8 07:38:11 mailserver postfix/smtpd[446839]: NOQUEUE: reject: RCPT > from mail-qt1-f179.google.com[209.85.160.179]: 451 4.3.5 Server > configuration error; from= > to= proto=ESMTP helo= The cause of the problem was logged IMMEDIATELY BEFORE THAT LINE.

Re: Blocking TLDs

2023-02-08 Thread James Pifer
On 2/8/2023 4:14 AM, Viktor Dukhovni wrote: On Wed, Feb 08, 2023 at 10:00:14AM +0200, mailm...@ionos.gr wrote: /\.top$/ REJECT /\.xyz$/ REJECT /\.cam$/ REJECT /\.fun$/ REJECT /\.buzz$/ REJECT /\.club$/ REJECT /\.link$/ REJECT /\.hinet\.net$/ REJECT Why everyone feels they need regular expressi

Re: Blocking TLDs

2023-02-08 Thread Wietse Venema
mailm...@ionos.gr: > Here is how I do it: > > check_sender_access regexp:/etc/postfix/sender_domain_checks > > here are the (partial) contents of /etc/postfix/sender_domain_checks: > > /\.top$/ REJECT > /\.xyz$/ REJECT > /\.cam$/ REJECT > /\.fun$/ REJECT > /\.buzz$/ REJECT > /\.club$/ REJECT > /

Re: Blocking TLDs

2023-02-08 Thread Viktor Dukhovni
On Wed, Feb 08, 2023 at 10:00:14AM +0200, mailm...@ionos.gr wrote: > /\.top$/ REJECT > /\.xyz$/ REJECT > /\.cam$/ REJECT > /\.fun$/ REJECT > /\.buzz$/ REJECT > /\.club$/ REJECT > /\.link$/ REJECT > /\.hinet\.net$/ REJECT Why everyone feels they need regular expressions for this is a mystery.

Re: Blocking TLDs

2023-02-08 Thread natan
Hi Please send info like: postconf -m Probably you dont have pcre try postmap -q your_ask pcre:/etc/postfix/reject_domains W dniu 7.02.2023 o 22:49, James Pifer pisze: Hello all. I'm trying to block some TLDs and everything I try I'm getting:  451 4.3.5 : Sender address rejected: Server conf

Re: Blocking TLDs

2023-02-08 Thread mailmary
Here is how I do it: check_sender_access regexp:/etc/postfix/sender_domain_checks here are the (partial) contents of /etc/postfix/sender_domain_checks: /\.top$/ REJECT /\.xyz$/ REJECT /\.cam$/ REJECT /\.fun$/ REJECT /\.buzz$/ REJECT /\.club$/ REJECT /\.link$/ REJECT /\.hinet\.net$/ REJECT Sinc

Re: Blocking TLDs

2023-02-07 Thread Viktor Dukhovni
On Tue, Feb 07, 2023 at 04:02:13PM -0600, Noel Jones wrote: > > Hello all. I'm trying to block some TLDs and everything I try I'm > > getting:  451 4.3.5 : Sender address rejected: > > Server configuration error; > > > > What is the error message logged before that? > > Does your postfix supp

Re: Blocking TLDs

2023-02-07 Thread Noel Jones
On 2/7/2023 3:49 PM, James Pifer wrote: Hello all. I'm trying to block some TLDs and everything I try I'm getting:  451 4.3.5 : Sender address rejected: Server configuration error; What is the error message logged before that? Does your postfix support the pcre map type? Maybe try regex: in

Re: Blocking TLDs with check_sender_access

2018-06-26 Thread Viktor Dukhovni
> On Jun 26, 2018, at 1:15 PM, @lbutlr wrote: > >> No, it works substantially better in check_sender_access, and very poorly >> in header_checks. > > It works very well for me, and has for years. The regular expressions you posted are fragile, subject to easy false posititves and should not

Re: Blocking TLDs with check_sender_access

2018-06-26 Thread @lbutlr
On Jun 26, 2018, at 09:10, Viktor Dukhovni wrote: > No, it works substantially better in check_sender_access, and very poorly > in header_checks. It works very well for me, and has for years. -- This is my signature. There are many like it, but this one is mine.

Re: Blocking TLDs with check_sender_access

2018-06-26 Thread Viktor Dukhovni
> On Jun 26, 2018, at 6:07 AM, @lbutlr wrote: > > I use header checks: > > /.*\.example.top/ DUNNO > /.*\.FriendwithJokeDoamin.xxx/ OK > /.*\.(com|net|org|edu|gov|ca|mx|de|dk|fi|uk|us|tv|info|biz|eu|es|il|it|nl|name|jp|host|au|nz)$/ > DUNNO > /.*\.*/ 550 Mail to or from this TLD is not allow

Re: Blocking TLDs with check_sender_access

2018-06-26 Thread @lbutlr
On 25 Jun 2018, at 14:45, Alex wrote: > I have a check_sender_access restriction that blocks many TLDs like > .red and .space. Problem is that we have one legitimate .red customer > (what was he thinking?) that needs to send us mail. How can I allow > this single domain? I use header checks: /.*

Re: Blocking TLDs with check_sender_access

2018-06-25 Thread Wietse Venema
Alex: > HI, > > I have a check_sender_access restriction that blocks many TLDs like > .red and .space. Problem is that we have one legitimate .red customer > (what was he thinking?) that needs to send us mail. How can I allow > this single domain? > > smtpd_sender_restrictions = > permit_

RE: Blocking TLDs

2016-02-25 Thread Wolfe , Robert
-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] On Behalf Of pe...@ixp.jp Sent: Thursday, February 25, 2016 12:38 AM To: postfix-users@postfix.org Subject: Re: Blocking TLDs On Feb/19.15:36:11, Wolfe, Robert wrote: > I get a LOT of emails from domains that have *.download and *.xyz

Re: Blocking TLDs

2016-02-21 Thread Ansgar Wiechers
On 2016-02-20 Sebastian Nielsen wrote: > 1: REJECT tells the spammer "Hey, your spam got stuck in the spam > filter. Wanna try again?". Better to DISCARD it so the spammer think > they got the spam through, then they won't switch to a new domain. > > I don't think anyone ever will receive legitima

Re: Blocking TLDs

2016-02-19 Thread yahoogroups
ous reasons. > > > > Från: Wolfe, Robert [mailto:robert.wo...@robertwolfe.org] > Skickat: den 19 februari 2016 23:19 > Till: 'Sebastian Nielsen' ; > postfix-users@postfix.org > Ämne: RE: Blocking TLDs > > > > Just copy and passed the DISCARD contents into bann

RE: Blocking TLDs

2016-02-19 Thread Wolfe, Robert
Just copy and passed the DISCARD contents into banned_tlds? From: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] On Behalf Of Sebastian Nielsen Sent: Friday, February 19, 2016 3:50 PM To: postfix-users@postfix.org Subject: SV: Blocking TLDs smtpd_sender_restriction