On Sunday 20 March 2005 10:19 pm, Ken Schneider wrote:
Anyone know how to block emails such as the following:
Mar 20 21:01:19 pc1 postfix/smtpd[8376]: connect from unknown[85.95.64.210] Mar 20 21:01:21 pc1 postfix/smtpd[8376]: 65F9CC6F2AD: client=unknown[85.95.64.210]
The connect from unknown is what I want blocked, not necessarily this address (although I have blocked this subnet).
I know you solved the problem already, but this might be a good time to suggest reading over the docs at www.postfix.org. :) http://www.postfix.org/documentation.html indexes a lot of good stuff, and you're probably specifically interested in "Relay/access control overview", with "Address verification" and "Stopping backscatter mail" being handy reads if you're feeling a tad more aggressive. Using the address verification stuff has worked out well for me over the last 6 months or so since I implemented it - both internally as a way to save some bandwidth / queue processing time on my backup mail server (it verifies recipient addresses on the main MX before accepting messages), and as externally as a way to reject those made-up hotmail/yahoo addresses (verify the sender's address validity before accepting the message). You might also consider looking over the postconf man page - at http://www.postfix.org/postconf.5.html as well as under "man postconf". Normally I'm not big on just reading docs for the hell of it, but this one's a decent read, and it'll give you an idea of what postfix can do. I find that helpful when trying to solve a problem - often I'll recall "wasn't there something similar in that doc I read a while back?" --Danny, who likes postfix largely because it's so well documented