List Info

Thread: check_client_access question




check_client_access question
country flaguser name
Canada
2007-12-19 21:30:23
Hi,

Somehow, 50% of the spam sending to my company has the
recipient 
kyulgxmxnmycompany.com. Therefore, I just added 
"smtpd_client_restrictions=check_client_access
hash:/etc/postfix/access" to 
my main.cf and created the access.db file with
"kyulgxmxn  reject" to stop 
the connection. I was hoping to stop the connection in
postfix to avoid the 
spam & virus scanning process in amavis. However, from
mail log, I saw it's 
still being scanned by amavis. Some of them will pass the
filter and then 
dropped by postfix after amavis. I don't understand why the
postfix will not 
reject the connection at the beginning. Could someone help,
please?

Oh!, since my email server will access all users even not
exist, the 
reject_unverified_recipient in postfix will not work for
me.

Thanks very much,
Aldous 


_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users

Re: check_client_access question
country flaguser name
United States
2007-12-19 22:42:13
 Aldous Leung wrote:
> Hi,
>
> Somehow, 50% of the spam sending to my company has the
recipient 
> kyulgxmxnmycompany.com. Therefore, I just added 
> "smtpd_client_restrictions=check_client_access
hash:/etc/postfix/access" to 
> my main.cf and created the access.db file with
"kyulgxmxn  reject" to stop 
> the connection. I was hoping to stop the connection in
postfix to avoid the 
> spam & virus scanning process in amavis. However,
from mail log, I saw it's 
> still being scanned by amavis. Some of them will pass
the filter and then 
> dropped by postfix after amavis. I don't understand why
the postfix will not 
> reject the connection at the beginning. Could someone
help, please?
>
> Oh!, since my email server will access all users even
not exist, the 
> reject_unverified_recipient in postfix will not work
for me.
>   

Whoa, let's stop the heavy bleeding before worrying about
the paper
cut.  You really need to reject invalid recipients - that
will
drastically cut down on your server load, and also eliminate
possible
backscatter.

also, I don't remember but I think your access file is not
correct - I
think you may need to look at a regex file or something. 
I'm too sleepy
right now to be sure of what I'm saying... anyone else want
to chime in?
_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users

[1-2]

about | contact  Other archives ( Real Estate discussion Medical topics )