Re: backscattering

2009-01-14 Thread Noel Jones
Aaron Wolfe wrote: we use a home grown policy filter for various things, I have been thinking about adding smtp to=from checks since it's almost zero additional resources to do. is it practical to attempt a sort of whitelist to allow the valid cases and then block the rest? is this a stupid id

Re: backscattering

2009-01-13 Thread Bruno GRANDJEAN
> Message du 13/01/09 21:33 > De : "Noel Jones" > A : "Bruno GRANDJEAN" , "postfix users list" > Copie à : > Objet : Re: backscattering > > > Bruno GRANDJEAN wrote: > > > > thks for replying to me so quickly, I will ad

Re: backscattering

2009-01-13 Thread Aaron Wolfe
On Tue, Jan 13, 2009 at 3:32 PM, Noel Jones wrote: > Bruno GRANDJEAN wrote: >> >> thks for replying to me so quickly, I will add a: >> reject_rbl_client zen.spamhaus.org >> in my /etc/postfix/main.cf >> I already added : >> reject_rbl_client ips.backscatterer.org >> >> how can I reject mail from o

Re: backscattering

2009-01-13 Thread mouss
Bruno GRANDJEAN a écrit : > Relax Dr Wietse I am using another domain to post to your mailing list This doesn't matter. it is a general principle. it was easy to guess that orange.fr isn't your domain. > Shame on me if I give the domain I have trouble with ;-) well, there's nothing bad in showin

Re: backscattering

2009-01-13 Thread Bruno GRANDJEAN
Relax Dr Wietse I am using another domain to post to your mailing list Shame on me if I give the domain I have trouble with ;-) bruno > Message du 13/01/09 21:34 > De : "Wietse Venema" > A : "Postfix users" > Copie à : > Objet : Re: backscattering >

Re: backscattering

2009-01-13 Thread mouss
Noel Jones a écrit : > mouss wrote: >> Noel Jones a écrit : >>> smtpd_data_restrictions = >>> permit_mynetworks >>> check_sender_access hash:/etc/postfix/no_backscatter >>> >>> # no_backscatter >>> <> reject_rbl_client ips.backscatterer.org >>> >>> Which will reject only bounces from them (inc

Re: backscattering

2009-01-13 Thread Noel Jones
mouss wrote: Noel Jones a écrit : smtpd_data_restrictions = permit_mynetworks check_sender_access hash:/etc/postfix/no_backscatter # no_backscatter <> reject_rbl_client ips.backscatterer.org Which will reject only bounces from them (including legit bounces). as well as SAV probes such

Re: backscattering

2009-01-13 Thread mouss
Noel Jones a écrit : > Bruno GRANDJEAN wrote: >> >> thks for replying to me so quickly, I will add a: >> reject_rbl_client zen.spamhaus.org >> in my /etc/postfix/main.cf >> I already added : >> reject_rbl_client ips.backscatterer.org >> >> how can I reject mail from outside claiming to be from my d

Re: backscattering

2009-01-13 Thread Wietse Venema
Bruno GRANDJEAN: > how can I reject mail from outside claiming to be from my domain? > > with a 'from:' header only in the header_checks internal users > cannot send emails, outgoing traffic was completely blocked. If you reject mail from outside with your address in the From: header, then you wo

Re: backscattering

2009-01-13 Thread Noel Jones
Bruno GRANDJEAN wrote: thks for replying to me so quickly, I will add a: reject_rbl_client zen.spamhaus.org in my /etc/postfix/main.cf I already added : reject_rbl_client ips.backscatterer.org how can I reject mail from outside claiming to be from my domain? [plain-text only please] [please d

Re: backscattering

2009-01-13 Thread Bruno GRANDJEAN
s internal users cannot send emails, outgoing traffic was completely blocked. all the best bruno > Message du 13/01/09 20:47 > De : "Noel Jones" > A : "Bruno GRANDJEAN" > Copie à : postfix-users@postfix.org > Objet : Re: backscattering > > > Br

Re: backscattering

2009-01-13 Thread Noel Jones
Bruno GRANDJEAN wrote: Hi, I am using a 2.3 postfix with spamassassin under freeBSD. Actually I am trying to stop a massive backscatting attack to my smtp server. I followed the backscatting procedure on postfix website but it doesn't work. probably because this isn't backscatter... Mess