OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Backscatter mail

From: Alexandre Balistrieri (balisir.inpe.br)
Date: Thu Jul 12 2007 - 13:24:00 CDT


On Thursday 12 July 2007, Noel Jones wrote:
>
> Are you saying you already have this and it doesn't seem to be working?
> Do you have postfix 2.1 or newer?

yes

postfix 2.4.3

master.cf
smtp-amavis unix - - n - 2 lmtp
        -o lmtp_helo_name=filtro1.sir.inpe.br
        -o lmtp_data_done_timeout=1200
        -o lmtp_send_xforward_command=yes
        -o disable_dns_lookups=yes
        -o max_use=20

10.0.0.1:10025 inet n - n - - smtpd
        -o content_filter=
        -o local_recipient_maps=
        -o relay_recipient_maps=
        -o smtpd_restriction_classes=
        -o smtpd_client_restrictions=
        -o smtpd_helo_restrictions=
        -o smtpd_sender_restrictions=
        -o smtpd_recipient_restrictions=permit_mynetworks,reject
        -o mynetworks=127.0.0.0/8,10.0.0.0/8
        -o strict_rfc821_envelopes=yes
        -o smtpd_error_sleep_time=0
        -o smtpd_soft_error_limit=1001
        -o smtpd_hard_error_limit=1000
        -o smtpd_client_connection_count_limit=0
        -o smtpd_client_connection_rate_limit=0
        -o
receive_override_options=no_header_body_checks,no_unknown_recipient_checks

I will check better.

And worse, I did not find "LMTP id 29656-17" in amavisd-new current log.

Jul 12 13:27:09 localhost postfix/cleanup[19937]: 0BE906F6: reject: header
Received: from smtp.sir.inpe.br ([10.0.0.1])? by localhost
(filtro2.sir.inpe.br [10.0.0.2]) (amavisd-new, port 10024)? with LMTP id
29656-17 for <fipecq_andreasir.inpe.br>;? Fri, 6 Jul 2007 15:20:58 from
unknown[150.163.41.211]; from=<fipecq_andreaadm.inpe.br>
to=<unimed_valdineiaadm.inpe.br> proto=ESMTP helo=<[150.163.41.211]>: 5.7.1
forged mail server name in Received: header:

--
[]s
Alexandre Balistrieri