Re: Menolak null-sender dan HELO dengan IP/domain sendiri

Asfihani <asfik-yNEVPA1OLJZWk0Htik3J/[email protected]>
Newsgroups gmane.mail.postfix.user.indonesian
Organization PT. Cakraperdana Proniagatama.
Message-ID <20040426092732.GW4173@nirwana>
On Mon, Apr 26, 2004 at 03:43:53PM +0700, Romie Djapri wrote:

> Banyak email spam dari null sender. Makanya saya mau block. Bukannya kalau
> bounce selalu ada mail from: dari hostnya ?

Sejauh yang saya alami, spam malah tidak menggunakan null-sender (null
reverse-path) ini, malahan kebanyakan virus (it's OK ada content
filtering disini. Dan kalau nggak salah RFC 821 mensaratkan bahwa
suatu MTA harus menerima alamat RFC null reverse-path ini.

Mungkin saya salah atau terlalu membaca RFC, ada komentar dari yang
lain? Pak Adi?

> > Ada logs?
> 
> [email protected] romie]$ telnet gabriel.tokolinux.com 25
> Trying 202.155.117.162...
> Connected to gabriel.tokolinux.com (202.155.117.162).
> Escape character is '^]'.
> 220 gabriel.tokolinux.com ESMTP Postfix
> helo djapri.com
> 250 gabriel.tokolinux.com
> mail from: <>
> 250 Ok
> rcpt to: <rmdjapri-oFFGAdPpPks/8dDi6+qYhgC/[email protected]>
> 250 Ok

Jika 202.155.117.162 ada di mynetworks, maka permit_mynetworks akan
dievaluasi lebih dulu (dan match) baru kemudian reject_non_fqdn_sender. 

> > smtpd_recipient_restrictions =
> >     permit_mynetworks
> >     reject_unauth_destination
> >     reject_unauth_pipelining
> >     check_helo_access hash:/etc/postfix/helo_access
> >     ...
> >
> > /etc/postfix/helo_access
> > 10.11.12.12		REJECT You're not 10.11.12.12
> > host.domain.tld		REJECT You're not host.domain.tld
> 
> Berhasil.. thanks. Apakah IP address juga mesti di masukan ? bukannya udah
> tercatat secara automatic ?

Tidak.

 Asfihani
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.