Dotaz: Spamcop nlokovany server a postfix

[svaca]

Ahoj,

pouzivam v postfifu nlokovani spameru pres spamcop ... mam ovsem jednu domenu se kterou musim komunikovat a oni jsou blokovany na spamcopu a protoze je to banda idiotu s prominutim, tak se nedokazi odlistovat, protoze nedokazi odstranit ten problem ....

Ovsem ja s nimi MUSIM komunikovat ...Da se nejak v postfixu nastavit, aby pro tu danou domenu, nebo IP adresu NEKONTROLOVAL

reject_rbl_client bl.spamcop.net

v direktive:

smtpd_recipient_restrictions = 

a ja nemusel tedy filtrovani pres Spamcop vypinat ???

Diky

Odpovědi

[svaca]

Opravdu nikdo netusi ? NEni pro to nahodou nadrazena directiva smtpd_recipient_access ?

[Dušan Hokův]

v postfixu se daji udelat pravidla i s vetvenim, kdysi jsem to delal kvuli podobnemu problemu, aby uzivatele co se overi pres sasl mohli odeslat postu, i kdyz jsou (napr. gprs.oskarmobil..) na spamcopu.

[svaca]

to nevim tedy jak, bych to vymyslel .... Nemas nejaky priklad ?

[Dušan Hokův]

treba tenhle.

[M.K.]

Co takto

smtpd_recipient_restrictions =
check_client_access tabulka
...

pricom v tej tabulke budu whitelistovane IPcky vracat OK?

[svaca]

Mam to nastavene jak radil Dusan .. Takze po vikendu se uvidi ... To co radis ty me taky napadlo, ale PRAVE nevim tu souvislost v tom, zda COKOLIV co je povolene v

smtpd_recipient_restrictions

a nasledovne mas:

check_client_access tabulka
reject_rbl_client bl.spamcop.net
...

projde, kdyz JE ZAROVEN v te same urovni povolen spamcop ... Chapes ? nevim, co ma prednost ..

[pupu]

Pravidla jsou vyhodnocovana postupne. Pokud jedno pravidlo da jednoznacnou odpoved, je hotovo. Poradi vyhodnocovani direktiv je uvedeno v dokumentaci:

    smtpd_client_restrictions
    smtpd_helo_restrictions
    smtpd_sender_restrictions
    smtpd_recipient_restrictions
    smtpd_data_restrictions
    smtpd_end_of_data_restrictions

http://www.postfix.org/SMTPD_ACCESS_README.html

[svaca]

To ale NEJSOU vnorena pravidla ...

Hm, zatim mi to nefunguje - ignoruje se to .... nedokazu si to predstavit v hlavne, jak to mam zapsat ...

Respektive dokazu, ze email: nejaky@nejakadomena.cz - se nekontroluje, a projde, ale to je mi na nic ...

Ja potrebuju, aby se nekontrolovala cela domena: @nejakadomena.cz nebo IP (nebo DNS) MX serveru te dane domeny .... tak jsem to zkousel zapsat i jako helo access a nedari se ...

priklady:

smtpd_restriction_classes = spamallow
spamallow = check_sender_access hash:/etc/postfix/spam-allow,
                 check_recipient_access hash:/etc/postfix/spam-allow, 
                 check_helo_access hash:/etc/postfix/spam-allow-ip

smtpd_recipient_restrictions = permit_mynetworks,
                                   permit_sasl_authenticated,
                                   check_recipient_access mysql:/etc/postfix/mysql-recipient.cf,
                                   reject_rbl_client sbl-xbl.spamhaus.org,
                                   reject_rbl_client dev.null.dk,
                                   reject_rbl_client opm.blitzed.org,
                                   reject_rbl_client sbl.spamhaus.org,
                                   reject_unknown_recipient_domain,
                                   reject_multi_recipient_bounce,
                                   reject_unauth_destination,
                                   reject_unknown_recipient_domain,
                                   reject_unverified_recipient,
                                   reject_non_fqdn_sender,
                                   reject_rbl_client bl.spamcop.net,
                                   reject_rbl_client list.dsbl.org,
#                                   reject_rhsbl_sender bogusmx.rfc-ignorant.org,
                                   reject_rhsbl_sender dsn.rfc-ignorant.org,
                                   check_policy_service inet:127.0.0.1:2501

/etc/postfix/spam-allow-ip:

194.228.88.140 OK

[svaca]

Jsem debil ....

Sel jsem na to slozite, to co potrebuju, JE uplne neco jineho ... Stacilo dat do main.cf:

smtpd_recipient_restrictions = permit_mynetworks,
                                   permit_sasl_authenticated,
                                   check_recipient_access mysql:/etc/postfix/mysql-recipient.cf,
                                   ..... 
                                   check_sender_access mysql:/etc/postfix/mysql-sender.cf,
                                   ...... 
                                   reject_rbl_client sbl-xbl.spamhaus.org,
                                   reject_rbl_client dev.null.dk,
                                   reject_rbl_client opm.blitzed.org,
                                   reject_rbl_client sbl.spamhaus.org,
                                   reject_unknown_recipient_domain,
                                   reject_multi_recipient_bounce,
                                   reject_unauth_destination,
                                   reject_unknown_recipient_domain,
                                   reject_unverified_recipient,
                                   reject_non_fqdn_sender,
                                   reject_rbl_client bl.spamcop.net,
                                   reject_rbl_client list.dsbl.org,
#                                   reject_rhsbl_sender bogusmx.rfc-ignorant.org,
                                   reject_rhsbl_sender dsn.rfc-ignorant.org,
                                   check_policy_service inet:127.0.0.1:2501

a je to ....

a pak v MySQL mam:

povolenadomena.cz OK sender