On Sun, 13 Jul 2014, Benny Pedersen wrote:

but you can pastebin the rejected msg if possible then ask how to make that spam tagged before leveing your ip, possible do remove permit_mynetworks in postfix so only authed senders can spam, if that happens, then close that domain

Pardon my ignorance, but is pastebin an external site for this sort of
thing?

However, I'm not seeing rejected messages.  I'll just get a call from
one of my clients saying they're not getting email.  I'll send a test
message to them, and see this in the maillog:

Jul 13 13:44:46 ssih postfix/smtp[12079]: D8CB212684E8: host 
gmail-smtp-in.l.google.com[74.125.29.27] said: 421-4.7.0 [204.12.61.116 15] Our 
system
 has detected an unusual rate of 421-4.7.0 unsolicited mail originating from 
your IP address. To protect our 421-4.7.0 users from spam, mail sent from y
our IP address has been temporarily 421-4.7.0 rate limited. Please visit 
421-4.7.0 http://www.google.com/mail/help/bulk_mail.html to review our Bulk 421
 4.7.0 Email Senders Guidelines. w18si12235074qay.49 - gsmtp (in reply to end 
of DATA command)

for your own domains, start with spf / dkim / dmarc

and then only accept spf pass in mta stage, from that point you can begin whitelist if needed, but keep the whitelist in spf since a single ip can have a million domains :)

I'm sorry, this is the "beyond my level of expertise" that I was referring to.

--pat--
--
Pat Traynor
p...@ssih.com

Reply via email to