From adress must match the smtp clients DNS domain

[Gerhard Rappenecker]

Hi all,

I want to reject mails from some smtp clients specified by IP or subnet, if the from address don't match the clients DNS Domain.
Can anyone help me?

My environment:
postfix 2.11.6
amavisd-new-2.8.1

I allready posted this message yesterday but it seems something went wrong

Regards
Gerhard

[Robert Schetterer]

Post by Gerhard Rappenecker
Hi all,
I want to reject mails from some smtp clients specified by IP or subnet, if the from address don't match the clients DNS Domain.
Can anyone help me?
postfix 2.11.6
amavisd-new-2.8.1
I allready posted this message yesterday but it seems something went wrong
Regards
Gerhard

i dont know if amavis has options for that

you may have a look at

https://github.com/croessner/vrfydmn

to use it with postfix/submission

perhaps ask the author to integrate ip/subnet matches or combine it
in milter-manager with a ip/subnet filter

http://milter-manager.sourceforge.net/reference/configuration.html

never tested...

Best Regards
MfG Robert Schetterer

[Curtis Maurand]

On my system this is done with postfix.

smtpd_recipient_restrictions = permit_sasl_authenticated,
permit_mynetworks,
reject_unauth_destination,
reject_invalid_hostname,
...


smtpd_helo_required = yes
smtpd_helo_restrictions = permit_mynetworks,
reject_invalid_helo_hostname,
reject_non_fqdn_helo_hostname,
reject_unknown_helo_hostname


Statistics since Sunday.

104 messages blocked by rbl zen.spamhaus.org

33 messages blocked by rbl bl.spamcop.net

21 messages blocked by rbl b.barracudacentral.org

211 messages quarantined by amavis

210 messages blocked by amavis

3635 blocked by no reverse DNS


Hope this helps,
Curtis

Post by Gerhard Rappenecker
Hi all,
I want to reject mails from some smtp clients specified by IP or subnet, if the from address don't match the clients DNS Domain.
Can anyone help me?
postfix 2.11.6
amavisd-new-2.8.1
I allready posted this message yesterday but it seems something went wrong
Regards
Gerhard

[Jari Fredriksson]

Post by Gerhard Rappenecker
Hi all,
I want to reject mails from some smtp clients specified by IP or
subnet, if the from address don't match the clients DNS Domain.
Can anyone help me?
postfix 2.11.6
amavisd-new-2.8.1
I allready posted this message yesterday but it seems something went wrong
Regards
Gerhard

You might want to take a look on mail security solutions like DKIM, SPF
and DMARC. These are de facto standards for this kind of stuff, and all
can be implemented into Postfix with FOSS components.

- --
***@iki.fi
https://www.bitwell.biz - cost effective hosting and security for
ecommerce