On Friday 25 March 2005 05:44 am, Danny Sauer wrote:
On Sunday 20 March 2005 10:19 pm, Ken Schneider wrote:
Anyone know how to block emails such as the following:
Mar 20 21:01:19 pc1 postfix/smtpd[8376]: connect from unknown[85.95.64.210] Mar 20 21:01:21 pc1 postfix/smtpd[8376]: 65F9CC6F2AD: client=unknown[85.95.64.210]
The connect from unknown is what I want blocked, not necessarily this address (although I have blocked this subnet).
I know you solved the problem already, but this might be a good time to suggest reading over the docs at www.postfix.org. :)
http://www.postfix.org/documentation.html indexes a lot of good stuff, and you're probably specifically interested in "Relay/access control overview", with "Address verification" and "Stopping backscatter mail" being handy reads if you're feeling a tad more aggressive.
Bringing this back on the topic of SuSE Linux... It should be pointed out that the Yast2 Installation and configuration of Postfix ENABLES RELAYING BY DEFAULT, and it offers NO ability to turn this off. You have to dig into the postfix settings and wade thru the postfix clear as mud documentation on their site. This happened to me on a brand new SuSE 9.1 install. For me, it was much quicker to fire up yast, de-install postfix and install sendmail, than it was to try to wade through the docs on postfix with terms that are never defined, examples that don't work, and a default install that is hopelessly vulnerable. This is a SuSE issue, they should not install postfix as an open relay. They don't install sendmail as an open relay. Whats up with that? -- _____________________________________ John Andersen