Tema: Re: Konsultuoju pašto klausimais
Autorius: Nerijus Kislauskas
Data: 2014-09-12 15:30:00
On 09/12/2014 02:34 PM, vitas wrote:
> smtpd_client_restrictions = permit_mynetworks,                         
> permit_sasl_authenticated,
> reject_unknown_client_hostname,
> reject_unknown_reverse_client_hostname,
> reject_unknown_helo_hostname,
> reject_rbl_client zen.spamhaus.org,
> reject_rbl_client cbl.abuseat.org,
> reject_rbl_client bl.spamcop.net,
> permit
> 
> smtpd_recipient_restrictions =
> reject_unauth_pipelining,
> permit_mynetworks,
> permit_sasl_authenticated,
> reject_non_fqdn_recipient,
> reject_unknown_recipient_domain,
> reject_unauth_destination,
> reject_unknown_helo_hostname,
> check_policy_service inet:127.0.0.1:10023, # -> Čia postgrey'jus
> permit

Šitas taisykles gali bandyti paversti tokiomis:

smtpd_client_restrictions =
	permit_mynetworks,
	permit_sasl_authenticated,
	reject_unknown_client_hostname,
	reject_unknown_reverse_client_hostname,
	reject_rbl_client zen.spamhaus.org,
	reject_rbl_client cbl.abuseat.org,
	reject_rbl_client bl.spamcop.net,
	permit

smtpd_helo_restrictions =
	permit_mynetworks,
	permit_sasl_authenticated,
	reject_invalid_helo_hostname,
        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Domenai be taško nepraeis iš karto, nuimsi load'ą nuo DNS pvz, "EHLO
blablabla".

	reject_unknown_helo_hostname

smtpd_relay_restrictions =
	permit_mynetworks,
	permit_sasl_authenticated,
	reject_unauth_destination

smtpd_recipient_restrictions =
	reject_unauth_pipelining,
	reject_non_fqdn_recipient,
	reject_unknown_recipient_domain,
	check_policy_service inet:127.0.0.1:10023
	permit

Reiktų testuoti, bet manau viskas būtų ok.
-- 
Pagarbiai,