On 2014.09.12 15:29, Nerijus Kislauskas wrote:
> On 09/12/2014 02:34 PM, vitas wrote:
>> smtpd_client_restrictions = permit_mynetworks,
>> permit_sasl_authenticated,
>> reject_unknown_client_hostname,
>> reject_unknown_reverse_client_hostname,
>> reject_unknown_helo_hostname,
>> reject_rbl_client zen.spamhaus.org,
>> reject_rbl_client cbl.abuseat.org,
>> reject_rbl_client bl.spamcop.net,
>> permit
>>
>> smtpd_recipient_restrictions =
>> reject_unauth_pipelining,
>> permit_mynetworks,
>> permit_sasl_authenticated,
>> reject_non_fqdn_recipient,
>> reject_unknown_recipient_domain,
>> reject_unauth_destination,
>> reject_unknown_helo_hostname,
>> check_policy_service inet:127.0.0.1:10023, # -> Čia postgrey'jus
>> permit
>
> Šitas taisykles gali bandyti paversti tokiomis:
>
> smtpd_client_restrictions =
> 	permit_mynetworks,
> 	permit_sasl_authenticated,
> 	reject_unknown_client_hostname,
> 	reject_unknown_reverse_client_hostname,
> 	reject_rbl_client zen.spamhaus.org,
> 	reject_rbl_client cbl.abuseat.org,
> 	reject_rbl_client bl.spamcop.net,
> 	permit
>
> smtpd_helo_restrictions =
> 	permit_mynetworks,
> 	permit_sasl_authenticated,
> 	reject_invalid_helo_hostname,
>          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> Domenai be taško nepraeis iš karto, nuimsi load'ą nuo DNS pvz, "EHLO
> blablabla".
>
> 	reject_unknown_helo_hostname
>
> smtpd_relay_restrictions =
> 	permit_mynetworks,
> 	permit_sasl_authenticated,
> 	reject_unauth_destination
>
> smtpd_recipient_restrictions =
> 	reject_unauth_pipelining,
> 	reject_non_fqdn_recipient,
> 	reject_unknown_recipient_domain,
> 	check_policy_service inet:127.0.0.1:10023
> 	permit
>
> Reiktų testuoti, bet manau viskas būtų ok.
>
Dėkui, pratestuosim, pasinaudosim.