On Sun, 24 Aug 2003 21:56:28 -0400, Larry Gilson wrote
> Hi Mike,
>
> > -----Original Message-----
> > From: Mike Vanecek
>
> > Details of the problem follow:
> >
> > My restrictions in /etc/postfix/main.cf in this order are:
> >
> > permissive = permit
>
> Is this a class? Did you define it?
Oops -- I failed to put in a
smtpd_restriction_classes = permissive
Thank you for asking. I suspect that will resolve why it seems to be ignored.
>
> > smtpd_client_restrictions = permit_mynetworks,
> > reject_rbl_client dnsbl.njabl.org,
> > reject_rbl_client relays.osirusoft.com,
> > reject_rbl_client bl.spamcop.net,
> > reject_rbl_client list.dsbl.org,
> > reject_unknown_client
> >
> > smtpd_helo_restrictions = permit_mynetworks,
> > reject_invalid_hostname,
> > reject_unknown_hostname
>
> The first permit_mynetworks should win.
I do not want to put that address in mynetworks since I do not want to allow
that address relay priviledges. I think defining the class would probably fix
things.
> I don't understand your log. Why is mail.readerhouse.nl sending you
> spamassassin-talk-admin messages. The IP query for 195.18.71.121 is
> answered by RIPE for readerhouse but mail.readerhouse.nl answers to
> 195.18.71.2. My log indicates that lists.sourceforge.net sends SA-talk
> messages from 66.35.250.206.
I did not understand them either, which is why I was trying to figure out what
was going on and why I posted my question. However, thanks to you and other
posters, it is becoming obvious that the message is probably a forged spam. I
am now starting to get multiple rejects at about the same time. Hence,
multiple spams?
I just put in a drop all packets from that ip address.
I guess I could put in the permit change and see what is in the message, but i
prefer to just drop it.
Unfortunately, the "to" address is unique to this list. That means the spammer
got the address from the list, its archives, or the server. I use archive:
encrypt, but not all archives recognize that header. If it keeps on, I shall
simply change my subscription address for this list. That is one advantage of
using unique addresses for all communication.
-------------------------------------------------------
This SF.net email is sponsored by: VM Ware
With VMware you can run multiple operating systems on a single machine.
WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines
at the same time. Free trial click here:http://www.vmware.com/wl/offer/358/0
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
