Re: Stopping spam.

2017-01-24 Thread Ralf Hildebrandt
* Mark Van Crombrugge : > At this point I receive the above e-mail. > > In the e-mail details below, I can find that the message is sent by > ironp...@ucr.ac.cr but even adding this e-mail address to the Postfix > blacklist has no effect. Why not block the machine litio.ucr.ac.cr [163.178.174.

Re: Stopping spam.

2017-01-24 Thread Noel Jones
On 1/24/2017 9:32 AM, Mark Van Crombrugge wrote: > Hi, > > > > We use Postfix - Dovecot – Sympa – spamassassin – clamav on an > Ubuntu 14.04 server. > > Last week we sent out a message to a Sympa mailing list and one of > the e-mail addresses was in Costa-Rica. (@ucr.ac.cr) > > Since then we

Re: Stopping spam.

2017-01-24 Thread Ben Greenfield
I think you have a bounce loop with mailman? bouncing each bounce message from ironport. I would make sure the mailman queue is empty. Ben > On Jan 24, 2017, at 10:38 AM, Noel Jones wrote: > > On 1/24/2017 9:32 AM, Mark Van Crombrugge wrote: >> Hi, >> >> >> >> We use Postfix - Dovecot – S

Stopping spam.

2017-01-24 Thread Mark Van Crombrugge
Hi, We use Postfix - Dovecot – Sympa – spamassassin – clamav on an Ubuntu 14.04 server. Last week we sent out a message to a Sympa mailing list and one of the e-mail addresses was in Costa-Rica. (@ucr.ac.cr) Since then we keep receiving an e-mail from their Cisco Iron Port system about eve

Re: Stopping Spam from Forwarding

2016-05-20 Thread Pablo E Garaitonandia
fix.org Sent: Friday, May 20, 2016 3:15:07 PM Subject: Re: Stopping Spam from Forwarding > Am 20.05.2016 um 21:10 schrieb Pablo E Garaitonandia : > > Christian thank you for the quick response. The edge servers are running > sendmail and my zimbra install runs postfix. If I am unde

Re: Stopping Spam from Forwarding

2016-05-20 Thread Christian Rößner
> Am 20.05.2016 um 21:10 schrieb Pablo E Garaitonandia : > > Christian thank you for the quick response. The edge servers are running > sendmail and my zimbra install runs postfix. If I am understanding what you > are saying correctly the header_checks statement runs a discard filter. I can >

Re: Stopping Spam from Forwarding

2016-05-20 Thread Pablo E Garaitonandia
ößner" To: "Pablo E Garaitonandia" Cc: postfix-users@postfix.org Sent: Friday, May 20, 2016 3:02:39 PM Subject: Re: Stopping Spam from Forwarding > Am 20.05.2016 um 20:52 schrieb Pablo E Garaitonandia : > > Hello all, > I am a rookie to postfix, I apologize in adv

Re: Stopping Spam from Forwarding

2016-05-20 Thread Christian Rößner
> Am 20.05.2016 um 20:52 schrieb Pablo E Garaitonandia : > > Hello all, > I am a rookie to postfix, I apologize in advance, and I have been > tasked with not allowing SPAM to be forwarded. I basically receive messages > from an edge mail server that adds a header to a messages stating wh

Stopping Spam from Forwarding

2016-05-20 Thread Pablo E Garaitonandia
Hello all, I am a rookie to postfix, I apologize in advance, and I have been tasked with not allowing SPAM to be forwarded. I basically receive messages from an edge mail server that adds a header to a messages stating whether it has been flagged for spam or not and another that gives the messa

Re: STOPPING SPAM FROM COMPROMISED ACCOUNTS.

2013-09-23 Thread LuKreme
On 21 Sep 2013, at 18:48 , Wietse Venema wrote: > Use postfwd (www.postfdw.org) or the like to rate-limit mail clients. tyop, the url is http://www.postfwd.org (yes, it took me two tries to figure out what was wrong with it) -- "Queen Isabella and King Ferdinand kicked 200,000 Jews out of Spai

Re: STOPPING SPAM FROM COMPROMISED ACCOUNTS.

2013-09-22 Thread John Hinton
On 9/21/2013 7:10 PM, Homer Wilson Smith wrote: I have an outgoing-only mail server for our customers called smtp.lightlink.com. It only allows relaying from local IP's, and known virtual domains if remote users wish to use it. We were fine when we were running pop before smtp authenti

Re: STOPPING SPAM FROM COMPROMISED ACCOUNTS.

2013-09-21 Thread Wietse Venema
Homer Wilson Smith: > > I have an outgoing-only mail server for our customers called > smtp.lightlink.com. It only allows relaying from local IP's, > and known virtual domains if remote users wish to use it. > > We were fine when we were running pop before smtp authentication, but > I

Re: STOPPING SPAM FROM COMPROMISED ACCOUNTS.

2013-09-21 Thread azurIt
>I have an outgoing-only mail server for our customers called >smtp.lightlink.com. It only allows relaying from local IP's, >and known virtual domains if remote users wish to use it. > > We were fine when we were running pop before smtp authentication, but >I was forced to also allow SASL aut

STOPPING SPAM FROM COMPROMISED ACCOUNTS.

2013-09-21 Thread Homer Wilson Smith
I have an outgoing-only mail server for our customers called smtp.lightlink.com. It only allows relaying from local IP's, and known virtual domains if remote users wish to use it. We were fine when we were running pop before smtp authentication, but I was forced to also allow SASL auth

Re: Stopping spam from a specifig subnet (relayed through a freemail provider)

2010-05-06 Thread /dev/rob0
On Thu, May 06, 2010 at 10:58:01AM +0200, Louis-David Mitterrand wrote: > On Wed, May 05, 2010 at 01:44:54PM -0400, Brian Evans - Postfix > List wrote: > > >> > > > You could try this in /etc/postfis/header_checks > > > > > > if > > > /^(Received|X-((Origin(ating)?|Client|MDRemote|Sender)

Re: Stopping spam from a specifig subnet (relayed through a freemail provider)

2010-05-06 Thread Noel Jones
On 5/6/2010 4:15 AM, Tom Hendrikx wrote: On 06/05/10 10:58, Louis-David Mitterrand wrote: On Wed, May 05, 2010 at 01:44:54PM -0400, Brian Evans - Postfix List wrote: You could try this in /etc/postfis/header_checks if /^(Received|X-((Origin(ating)?|Client|MDRemote|Sender)-?IP|(Client|Remote

Re: Stopping spam from a specifig subnet (relayed through a freemail provider)

2010-05-06 Thread Louis-David Mitterrand
On Thu, May 06, 2010 at 11:15:21AM +0200, Tom Hendrikx wrote: > On 06/05/10 10:58, Louis-David Mitterrand wrote: > > On Wed, May 05, 2010 at 01:44:54PM -0400, Brian Evans - Postfix List wrote: > > >>> You could try this in /etc/postfis/header_checks > >>> > >>> if > >>> /^(Received|X-((O

Re: Stopping spam from a specifig subnet (relayed through a freemail provider)

2010-05-06 Thread Tom Hendrikx
On 06/05/10 10:58, Louis-David Mitterrand wrote: > On Wed, May 05, 2010 at 01:44:54PM -0400, Brian Evans - Postfix List wrote: >>> You could try this in /etc/postfis/header_checks >>> >>> if >>> /^(Received|X-((Origin(ating)?|Client|MDRemote|Sender)-?IP|(Client|Remote_)Addr|PHP-Script)):

Re: Stopping spam from a specifig subnet (relayed through a freemail provider)

2010-05-06 Thread Louis-David Mitterrand
On Wed, May 05, 2010 at 01:44:54PM -0400, Brian Evans - Postfix List wrote: > >> > > You could try this in /etc/postfis/header_checks > > > > if > > /^(Received|X-((Origin(ating)?|Client|MDRemote|Sender)-?IP|(Client|Remote_)Addr|PHP-Script)):/ > > if > > !/^(X-Original-)?To:[...@]*(afric

Re: Stopping spam from a specifig subnet (relayed through a freemail provider)

2010-05-05 Thread Brian Evans - Postfix List
On 5/5/2010 1:10 PM, Louis-David Mitterrand wrote: > On Wed, May 05, 2010 at 07:00:37PM +0200, Laurent CARON wrote: > >> Hi, >> >> I'm basically trying to protect my users from the following: >> >> Spam >> - Sent from accounts hosted on freemail providers (yahoo, ...) >> - Originating from Afri

Re: Stopping spam from a specifig subnet (relayed through a freemail provider)

2010-05-05 Thread Noel Jones
On 5/5/2010 12:00 PM, Laurent CARON wrote: Hi, I'm basically trying to protect my users from the following: Spam - Sent from accounts hosted on freemail providers (yahoo, ...) - Originating from AfriNIC ranges - Tergetted at several dozen of users The headers look like this: Received: from [41

Re: Stopping spam from a specifig subnet (relayed through a freemail provider)

2010-05-05 Thread Louis-David Mitterrand
On Wed, May 05, 2010 at 07:00:37PM +0200, Laurent CARON wrote: > Hi, > > I'm basically trying to protect my users from the following: > > Spam > - Sent from accounts hosted on freemail providers (yahoo, ...) > - Originating from AfriNIC ranges > - Tergetted at several dozen of users > > The hea

Stopping spam from a specifig subnet (relayed through a freemail provider)

2010-05-05 Thread Laurent CARON
Hi, I'm basically trying to protect my users from the following: Spam - Sent from accounts hosted on freemail providers (yahoo, ...) - Originating from AfriNIC ranges - Tergetted at several dozen of users The headers look like this: Received: from [41.207.213.162] by web1104.biz.mail.sk1.yahoo.