OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: How to block this?

From: mouss (moussnetoyen.net)
Date: Tue Apr 01 2008 - 11:07:36 CDT


LinuxCorporate [ Postfix ] wrote:
> Hi guys,
>
> My postfix has been configured to not accept mail from
> anyonemydomain.com if it was not
> generated inside my network and it has been working gladly.
>
> But I've got some massages that apear to pass through this
> configuration, whose example
> follows below: See the lines enclosed by [ ]. The first one shows
> that it's an IP outside my
> network and the second one forges an address of my domain "Ana
> Carla"mg.trt.gov.br.

next time you show evidence, do not alter it. adding [] signs is useless
at best.

- use reject_non_fqdn_helo_hostname
- if you have a recent postfix, use
    check_reverse_client_hostname_access hash:/etc/postfix/host_acl
    check_helo_access hash:/etc/postfix/host_acl

== host_acl
.user.veloxzone.com.br REJECT

- use a content filter (spamassassin....)

>
> Does anyone know how can I block this?
>
> Thanks.
>
> Return-Path: <annebeatriz2008gmail.com>
> X-Original-To: paulobs
> Received: from localhost (gandalf.trt.gov.br [127.0.0.1])
> by gandalf.trt.gov.br (Postfix) with SMTP id 358662B2B13
> for <paulobs>; Wed, 26 Mar 2008 13:53:37 -0300 (BRT)
> [ Received: from ROADCOM (unknown [189.81.75.243]) ]
> by gandalf.trt.gov.br (Postfix) with SMTP id 70DD72B2A87
> for <paulobsmg.trt.gov.br>; Wed, 26 Mar 2008 13:53:13 -0300 (BRT)
> [ From: "" <"Ana Carla"mg.trt.gov.br> ]
> To: "paulobs" <paulobsmg.trt.gov.br>
> Subject: Oiiee tudo bem???
> Date: Wed, 26 Mar 08 13:47:01 Hora oficial do Brasil
> MIME-Version: 1.0
> Content-Type: multipart/mixed;boundary=
> "----=_NextPart_000_00CC_22A781C8.2DA5EE29"
> X-Priority: 3
> X-MSMail-Priority: Normal
> X-Mailer: Microsoft Outlook Express 6.00.2462.0000
> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2462.0000
> Message-Id: <20080326165313.70DD72B2A87gandalf.trt.gov.br>
>