On Fri, 2005-04-01 at 16:26 -0500, Chris Mauritz wrote: > Personally, I reject mail from any server with broken DNS. It's > extremely low hanging fruit to avoid a lot of spam from zombie PCs in > Asia/Eastern Europe. You also might want to consider using the various > freely available RBL sites to eliminate known naughty hosts/networks. > After mail runs this gauntlet, I pass it through CRM114 and have reduced > the spam that makes it to my mailbox to a couple of messages a week. > > Here's the relevant lines from my postfix config: > > maps_rbl_reject_code = 571 > smtpd_helo_required = yes > smtpd_delay_reject = no > allow_untrusted_routing = no > disable_vrfy_command = yes > # > maps_rbl_domains = > relays.ordb.org, > opm.blitzed.org, > list.dsbl.org, > sbl.spamhaus.org, > cbl.abuseat.org, > dul.dnsbl.sorbs.net > > smtpd_recipient_restrictions = > reject_invalid_hostname, > reject_non_fqdn_hostname, > reject_non_fqdn_sender, > reject_non_fqdn_recipient, > reject_unknown_sender_domain, > reject_unknown_recipient_domain, > permit_mynetworks, > reject_unauth_destination, > reject_maps_rbl, > permit > > smtpd_data_restrictions = > reject_unauth_pipelining, > permit > > stale_lock_time = 120 > default_rbl_reply = $rbl_code Service denied; blocked ---- an fyi - postfix 2.2.1 warning: support for restriction "reject_maps_rbl" will be removed from Postfix; use "reject_rbl_client domain-name" instead is logged in /var/log/maillog and http://www.postfix.org/spam.html#maps_rbl_domains says nothing about this change Craig