From: Carlos Williams (carloswillgmail.com)
Date: Tue Apr 29 2008 - 12:15:58 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Tue, Apr 29, 2008 at 12:50 PM, D Hill <d.hillyournetplus.com> wrote:
>
> I don't know if you trust using SpamCop or not. For what it's worth, the
> above IP you show in the logs is listed:
>
> %host 127.68.248.72.bl.spamcop.net
> 127.68.248.72.bl.spamcop.net has address 127.0.0.2
>
I would be willing to try and see if it helps. I am confused however I
have the following:

        reject_rbl_client bl.spamcop.net,

The above is listed in smtpd_recipient_restrictions &
smtpd_client_restrictions. Do I need to move it to
smtpd_sender_restrictions?

If that host is listed in spamcop and I have spamcop rejecting on both
those on my main.cf, why did it pass? I am adding my postconf -n below
for more info:

[rootmail ~]# postconf -n
address_verify_sender = <>
alias_database = hash:/etc/postfix/aliases, hash:/etc/mailman/aliases
alias_maps = hash:/etc/postfix/aliases, hash:/etc/mailman/aliases
biff = no
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
command_time_limit = 1400
config_directory = /etc/postfix
content_filter = smtp-amavis:[127.0.0.1]:10024
daemon_directory = /usr/libexec/postfix
default_destination_recipient_limit = 100
disable_vrfy_command = yes
header_checks = regexp:/etc/postfix/header_checks
home_mailbox = Maildir/
html_directory = no
inet_interfaces = all
local_recipient_maps = unix:passwd.byname $alias_maps
mail_owner = postfix
mailbox_size_limit = 40000000
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
max_idle = 175
maximal_backoff_time = 2000s
message_size_limit = 10240000
mime_header_checks = regexp:/etc/postfix/mime_header_checks.regexp
mydestination = $myhostname, $mydomain, localhost.$mydomain, localhost
mydomain = example.org
myhostname = mail.example.org
mynetworks = $config_directory/mynetworks
mynetworks_style = host
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases.postfix
parent_domain_matches_subdomains =
proxy_interfaces = 127.0.0.1/8
qmgr_message_active_limit = 20000
queue_directory = /var/spool/postfix
queue_run_delay = 500s
readme_directory = /usr/share/doc/postfix-2.2.10/README_FILES
relay_domains = onesaf.net, saic.com
sample_directory = /usr/share/doc/postfix-2.2.10/samples
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
smtp_tls_note_starttls_offer = yes
smtp_use_tls = yes
smtpd_banner = $myhostname ESMTP debugger_command
= PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin xxgdb
$daemon_directory/$process_name $process_id & sleep 5
smtpd_client_restrictions =
permit_mynetworks, permit_sasl_authenticated, reject_unauth_pipelining, reject_unknown_sender_domain,
       reject_non_fqdn_sender, reject_rbl_client zen.spamhaus.org,
   reject_rbl_client bl.spamcop.net, reject_rbl_client
safe.dnsbl.sorbs.net, reject_rbl_client list.dsbl.org
smtpd_data_restrictions = reject_unauth_pipelining
smtpd_error_sleep_time = 0
smtpd_hard_error_limit = 5
smtpd_helo_required = yes
smtpd_helo_restrictions =
permit_mynetworks, permit_sasl_authenticated,
        reject_invalid_hostname, reject_non_fqdn_hostname,
        check_helo_access, regexp:/etc/postfix/helo.regexp
smtpd_recipient_restrictions = permit_sasl_authenticated,
permit_mynetworks, reject_unauth_destination
smtpd_reject_unlisted_recipient = yes
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
smtpd_sender_restrictions = permit_mynetworks,
        permit_sasl_authenticated, check_sender_access
hash:/etc/postfix/access, check_sender_access
hash:/etc/postfix/sender_restrictions, check_sender_access
hash:/etc/postfix/siteoverride, reject_non_fqdn_sender,
reject_unknown_sender_domain, permit
smtpd_soft_error_limit = 4
smtpd_timeout = 60s
smtpd_tls_auth_only = no
smtpd_tls_cert_file = /etc/httpd/conf/ssl.crt/mail.example.org.crt
smtpd_tls_key_file = /etc/httpd/conf/ssl.key/mail.example.org.key
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
smtpd_use_tls = yes
strict_rfc821_envelopes = yes
tls_random_source = dev:/dev/urandom
unknown_address_reject_code = 550
unknown_client_reject_code = 550
unknown_hostname_reject_code = 501
unknown_local_recipient_reject_code = 550
unverified_recipient_reject_code = 550
unverified_sender_reject_code = 550

--
Man your battle stations...

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]