Skip site navigation (1) Skip section navigation (2)

Peripheral Links

Header And Logo

PostgreSQL
| The world's most advanced open source database.

Site Navigation

Search archives
  Advanced Search

Strengthing mail restriction rules in Postfix


  • From: "Marc G. Fournier" <scrappy(at)postgresql(dot)org>
  • To: pgsql-announce(at)postgresql(dot)org
  • Cc: pgsql-general(at)postgresql(dot)org, pgsql-hackers(at)postgresql(dot)org
  • Subject: Strengthing mail restriction rules in Postfix
  • Date: Fri, 7 May 2004 18:06:31 -0300 (ADT)
  • Message-id: <20040507180520.C98402@ganymede.hub.org> <text/plain>

Just added a rule to postfix's config file to try and clean up some of the
trash going through the server, namely:

smtpd_helo_restrictions =
	permit_mynetworks,
	reject_unknown_hostname,
	reject_invalid_hostname,
	reject_non_fqdn_hostname,
	permit

smtpd_sender_restrictions =
	permit_mynetworks,
	reject_invalid_hostname,
	reject_unknown_hostname,
	reject_unknown_sender_domain,
	reject_non_fqdn_hostname,
	reject_non_fqdn_sender,
	permit

which are definied as:

#   reject_invalid_hostname: reject HELO hostname with bad syntax.
#   reject_unknown_hostname: reject HELO hostname without DNS A or MX record.
#   reject_non_fqdn_hostname: reject HELO hostname that is not in FQDN form
#   reject_non_fqdn_sender: reject sender address that is not in FQDN form
#   reject_unknown_sender_domain: reject sender domain without A or MX record.

that should weed out some garbage before it gets into the queues ... or
those users with mis-configured servers ... so, if you are legit, and
trying to send an email through that is being rejected, take a look at the
above as potential causes ...


----
Marc G. Fournier           Hub.Org Networking Services (http://www.hub.org)
Email: scrappy(at)hub(dot)org           Yahoo!: yscrappy              ICQ: 7615664




Home | Main Index | Thread Index

Privacy Policy | About PostgreSQL
Copyright © 1996 – 2012 PostgreSQL Global Development Group