OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: reject_mismatched_sender_domain

From: Noel Jones (njonesmegan.vbhcs.org)
Date: Mon May 19 2003 - 13:22:49 CDT


On Mon, May 19, 2003 at 11:26:19AM -0400, Toll, Eric wrote:
> To use this new restriction name selectively, simply create a file called
> (for example) sender-validate that looks like:
>
> hotmail.com reject_mismatched_sender_domain
> yahoo.com reject_mismatched_sender_domain
> excite.com reject_mismatched_sender_domain
> ...
> and then use the postmap command to compile that into a Postfix-compatible
> fast-lookup .db hashed data base: postmap sender-validate
>
> Then finally, just add your new sender validation data base to your existing
> list of Postfix smtpd_sender_restrictions in your main.cf configuration
> file: smtpd_sender_restrictions = ... hash:/etc/postfix/sender-validate ...
>
>
> Anyone care to post to the list a bigger/longer list of domains worthy of
> applying the above check to?
>
> TIA.
> Eric.
>
>
>

the big list is here:
http://www.monkeys.com/anti-spam/filtering/sender-domain-validate.in

Note that reject_mismatched_sender_domain is a patch against rather old
postfix 20010714 and won't apply to current versions. I don't know of
any updated patches for this unofficial feature.

However, this list is still useful for people using current postfix
versions. Use it like this:
smtpd_sender_restrictions =
  check_sender_access = hash:/etc/postfix/strict-sender

where strict-sender is the above mentioned sender-domain-validate.in
list edited so it looks like:
aol.com reject_unknown_client, reject_unknown_hostname

This will reject lots of spam, and doesn't require any patches.

--
Noel Jones