Stopping backscatter spam to a specific domain

2021-07-11 Thread Ron Garret
I have recently come under a backscatter spam attack from one specific domain. This domain has blacklisted my server’s IP address, and so bounce replies sent to this domain are piling up in my mail queue and I have to go through periodically and manually delete them. I don’t want to disable bo

Re: Stopping backscatter spam to a specific domain

2021-07-11 Thread Wietse Venema
Ron Garret: > I have recently come under a backscatter spam attack from one > specific domain. This domain has blacklisted my server?s IP > address, and so bounce replies sent to this domain are piling up > in my mail queue and I have to go through periodically and manually > delete them. I don?t

Re: Stopping backscatter spam to a specific domain

2021-07-11 Thread Ron Garret
On Jul 11, 2021, at 9:58 AM, Wietse Venema wrote: > Ron Garret: >> I have recently come under a backscatter spam attack from one >> specific domain. This domain has blacklisted my server?s IP >> address, and so bounce replies sent to this domain are piling up >> in my mail queue and I have to

Re: Stopping backscatter spam to a specific domain

2021-07-11 Thread Wietse Venema
Ron Garret: [ Charset windows-1252 converted... ] > > On Jul 11, 2021, at 9:58 AM, Wietse Venema wrote: > > > Ron Garret: > >> I have recently come under a backscatter spam attack from one > >> specific domain. This domain has blacklisted my server?s IP > >> address, and so bounce replies sent

Re: Stopping backscatter spam to a specific domain

2021-07-11 Thread Kevin N.
This might help: http://www.postfix.org/BACKSCATTER_README.html Cheers, K. On Jul 11, 2021, at 9:58 AM, Wietse Venema wrote: Ron Garret: I have recently come under a backscatter spam attack from one specific domain. This domain has blacklisted my server?s IP address, and so bounce replie

Re: Stopping backscatter spam to a specific domain

2021-07-11 Thread Ron Garret
On Jul 11, 2021, at 10:12 AM, Wietse Venema wrote: > Ron Garret: > [ Charset windows-1252 converted... ] >> >> On Jul 11, 2021, at 9:58 AM, Wietse Venema wrote: >> >>> Ron Garret: I have recently come under a backscatter spam attack from one specific domain. This domain has blackl

Re: Stopping backscatter spam to a specific domain

2021-07-11 Thread Ron Garret
Yes, I looked at that, but AFAICT that is all about blocking INBOUND backscatter spam, not stopping outbound messages. On Jul 11, 2021, at 10:15 AM, Kevin N. wrote: > This might help: http://www.postfix.org/BACKSCATTER_README.html > > Cheers, > > K. > > >> On Jul 11, 2021, at 9:58 AM, Wiets

Re: Stopping backscatter spam to a specific domain

2021-07-11 Thread Bill Cole
See http://www.postfix.org/DEBUG_README.html#mail, which describes how best to get useful help here. Actual log excerpts, sample messages related to that logging, and 'postconf -n' output would help a great deal in understanding your problem. In general, you only can fully fix backscatter (i

Re: Stopping backscatter spam to a specific domain

2021-07-11 Thread Claus R. Wickinghoff
Hi, The problem is that a rejected recipient produces a mailer-daemon reply. You need to get rid of them. My approach is to reject them in smtp dialogue. I generate a list of valid recipient addresses by script automatically and use this (hashed) list in smtpd_recipient_restrictions:

Re: Stopping backscatter spam to a specific domain

2021-07-11 Thread Matus UHLAR - fantomas
Ron Garret: I have recently come under a backscatter spam attack from one specific domain. This domain has blacklisted my server?s IP address, and so bounce replies sent to this domain are piling up in my mail queue and I have to go through periodically and manually delete them. I don?t want to

Re: Stopping backscatter spam to a specific domain

2021-07-11 Thread Ron Garret
On Jul 11, 2021, at 12:22 PM, Matus UHLAR - fantomas wrote: > >> The problem is that a rejected recipient produces a mailer-daemon reply. > > only if you accept mail for such recipient. Ah. That may be my problem then. I’m using Dovecot via LMTP for local delivery. I thought that postfix

Re: Stopping backscatter spam to a specific domain

2021-07-11 Thread Claus R. Wickinghoff
Hi, I thought that postfix would receive information about non-existent users via that protocol, but I guess it doesn’t and ends up just accepting everything. These are two different things: 1. postfix gets the e-mail from the internet via smtp and puts in his queue. From this point on post

Re: Stopping backscatter spam to a specific domain

2021-07-11 Thread Wietse Venema
Ron Garret: [ Charset windows-1252 converted... ] > > On Jul 11, 2021, at 12:22 PM, Matus UHLAR - fantomas > wrote: > > > > >> The problem is that a rejected recipient produces a mailer-daemon reply. > > > > only if you accept mail for such recipient. > > Ah. That may be my problem then. I

Re: Stopping backscatter spam to a specific domain

2021-07-11 Thread Bill Cole
On 2021-07-11 at 15:46:45 UTC-0400 (Sun, 11 Jul 2021 12:46:45 -0700) Ron Garret is rumored to have said: On Jul 11, 2021, at 12:22 PM, Matus UHLAR - fantomas wrote: The problem is that a rejected recipient produces a mailer-daemon reply. only if you accept mail for such recipient. Ah.

Re: Stopping backscatter spam to a specific domain

2021-07-11 Thread PGNet Dev
On 7/11/21 3:46 PM, Ron Garret wrote: Ah. That may be my problem then. I’m using Dovecot via LMTP for local delivery. I thought that postfix would receive information about non-existent users via that protocol, but I guess it doesn’t and ends up just accepting everything. So… is dovecot ac

Re: Optimum Queue Size

2021-07-11 Thread Viktor Dukhovni
On Sat, Jul 10, 2021 at 07:34:15AM -0700, Greg Sims wrote: > I am tuning the performance of our mail server.We collect > information in our logs every 10 seconds including qshape, iostat, > free and mpstat. It seems that the maxproc parameter in master.cf is > important for us as we can see t

Re: Stopping backscatter spam to a specific domain

2021-07-11 Thread Ron Garret
Thanks, that was very helpful. This has me wondering: if a message is sent to multiple recipients and some are valid and others are not, what is the Right Thing to do? rg P.S. Just FYI: > I'm not sure what the problem is with Postfix and sqlite See http://postfix.1071664.n5.nabble.com/What-i