OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: mimail pattern?

From: Wietse Venema (wietseporcupine.org)
Date: Sat Aug 02 2003 - 08:53:21 CDT


Noel Jones:
> After looking at my logs, I rejected about 20 messages yesterday
> with envelope FROM admin$mydomain.
> First one arrived at Aug 1, 19:18 GMT

Although it sends "HELO localhost" I can't always stop it that
way because some of the mail I receive is forwarded (so it has
the proper helo, and adminsomeone.elses.domain as sender).

I have set up a sender block like this:

/etc/postfix/main.cf:
    smtpd_sender_restrictions =
        ... check_sender_access hash:/etc/postfix/sender_access

/etc/postfix/sender_access:
    # Domains that are forwarded from elsewhere.
    adminpostfix.org reject mimail virus
    ...
    # Domains that are delivered directly to this system.
    adminporcupine.org reject mimail virus
    ...

postmap the table, and you're done.

This works with old Postfix releases too.

        Wietse