OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
deny sender

From: Andrew Long (fursinkgmail.com)
Date: Mon Mar 17 2008 - 07:04:20 CDT


Looking for a bit of guidence on rejecting senders. I read the UCE
doc, but must have something wrong... First, I see a flood of mail
from one IP (wifi hotspot), so I look in the queue and verify that
certain mssgs are indeed spam. Now, I grep the log and determine that
the sender addresses used were *spamdomain.com and *spamdomain1.com.
Now, I added this to /etc/postfix/sender_access and ran postmap:

-- sender_access --
*spamdomain.com REJECT
*spamdomain2.com REJECT

and add to smtpd_sender_restrictions:
   check_sender_access hash:/etc/postfix/sender_access

I then telnet to localhost 25, but I was still able to send mail "MAIL
FROM: <usernationalcity.com>".
I also tried putting the check_sender_access line in
smtpd_recipient_restrictions with the same result.

I also tried with simply spamdomain.com in the sender_access, but no go...

Just a clue please,

Andrew
nano