Strengthing mail restriction rules in Postfix

From: "Marc G(dot) Fournier" <scrappy(at)postgresql(dot)org>
To: pgsql-announce(at)postgresql(dot)org
Cc: pgsql-general(at)postgresql(dot)org, pgsql-hackers(at)postgresql(dot)org
Subject: Strengthing mail restriction rules in Postfix
Date: 2004-05-07 21:06:31
Message-ID: 20040507180520.C98402@ganymede.hub.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-announce pgsql-general pgsql-hackers


Just added a rule to postfix's config file to try and clean up some of the
trash going through the server, namely:

smtpd_helo_restrictions =
permit_mynetworks,
reject_unknown_hostname,
reject_invalid_hostname,
reject_non_fqdn_hostname,
permit

smtpd_sender_restrictions =
permit_mynetworks,
reject_invalid_hostname,
reject_unknown_hostname,
reject_unknown_sender_domain,
reject_non_fqdn_hostname,
reject_non_fqdn_sender,
permit

which are definied as:

# reject_invalid_hostname: reject HELO hostname with bad syntax.
# reject_unknown_hostname: reject HELO hostname without DNS A or MX record.
# reject_non_fqdn_hostname: reject HELO hostname that is not in FQDN form
# reject_non_fqdn_sender: reject sender address that is not in FQDN form
# reject_unknown_sender_domain: reject sender domain without A or MX record.

that should weed out some garbage before it gets into the queues ... or
those users with mis-configured servers ... so, if you are legit, and
trying to send an email through that is being rejected, take a look at the
above as potential causes ...

----
Marc G. Fournier Hub.Org Networking Services (http://www.hub.org)
Email: scrappy(at)hub(dot)org Yahoo!: yscrappy ICQ: 7615664

Browse pgsql-announce by date

  From Date Subject
Next Message Robert Treat 2004-05-11 16:41:47 == PostgreSQL Weekly News - May 11th 2004 ==
Previous Message Rick Gigger 2004-05-07 19:03:14 Re: pgFoundry Open For Business

Browse pgsql-general by date

  From Date Subject
Next Message Dennis Gearon 2004-05-07 22:00:56 graphical ERD tool
Previous Message Joe Conway 2004-05-07 20:19:02 Re: Storing a file hash as primary key

Browse pgsql-hackers by date

  From Date Subject
Next Message Tom Lane 2004-05-07 21:19:05 Re: psql 7.3.4 disagrees with NATURAL CROSS JOIN
Previous Message Peter Eisentraut 2004-05-07 20:39:25 Re: Aclitem "high level description"