OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Spam pretending to be from a local domain

From: mouss (mlist.onlyfree.fr)
Date: Sun Apr 01 2007 - 06:17:33 CDT


alex handle wrote:
> On 3/31/07, Magnus Bäck <magnusdsek.lth.se> wrote:
>>
>> On Saturday, March 31, 2007 at 04:29 CEST,
>> LuKreme <kremelskreme.com> wrote:
>>
>> [...]
>>
>> > now, jfoccovisp.net is not valid, so is there something I can set in
>> > postfix that will reject mail from unknown local users, or is there a
>> > reason I should not do this?
>>
>> http://www.postfix.org/postconf.5.html#reject_unlisted_sender
>> http://www.postfix.org/postconf.5.html#smtpd_reject_unlisted_sender
>>
>>
> I have implemented reject_unlisted_sender with warn_if_reject.
> Be careful i got a lot of false positives. Watch for bulkmailers, your or
> your customers webservers
> (wwwlocaldomain.com).

then the thing to fix is these mailers. reject_unlisted_sender is safe
and sane. you don't want to send mail that can't get a bounce in case of
errors, or can't replied to. if the bulkers don't want people replying,
provide them with one address (some people use noreply....) that is
forwarded to you or some administrative account. but a -owner style
address as the envelope sender is appropriate here.
>
> [snip]
>