postfix sender_access 不拒绝

postfix sender_access 不拒绝

我正在尝试阻止来自一个发件人的垃圾邮件。他们每次都使用另一个邮件服务器。以下是原始电子邮件的标题(我将我的电子邮件和主机替换为:[电子邮件保护],发件人电子邮件和主机我替换为:[电子邮件保护],其他保持不变):

From - Mon Jan 27 14:17:08 2014
X-Account-Key: account7
X-UIDL: 1201266183.11294
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:                                                                                 
Return-Path: <[email protected]>
Received: from my-domain.com ([unix socket])
     by localhost (Cyrus v2.2.13-Debian-2.2.13-10) with LMTPA;
     Mon, 27 Jan 2014 14:15:18 +0200
X-Sieve: CMU Sieve 2.2
X-Greylist: delayed 460 seconds by postgrey-1.27 at mnl-bck; Mon, 27 Jan 2014 14:15:05 EET
Received: from gw13.delivery-gate.com (gw13.delivery-gate.com [72.29.83.9])
    by my-domain.com (ESMTP daemon) with ESMTP id 999EA15F505
    for <[email protected]>; Mon, 27 Jan 2014 14:15:05 +0200 (EET)
MIME-Version: 1.0
From: Blah blah blah <[email protected]>
To: [email protected]
X-Original-To: [email protected]
Reply-To: Blah blah blah <[email protected]>
Subject: {(***Disarmed***)} =?UTF-8?B?VmFsZW50xKtuYSBkaWVuYSBuxIFrIQ==?=
Date: Mon, 27 Jan 2014 12:07:07 +0000
DKIM-Signature: v=1; a=rsa-sha1; q=dns/txt; l=6092; s=default;
    t=1390824427; c=relaxed/simple;
    h=From:To:Subject;
    d=delivery-gate.com;
    z=From:=20Blah blah blah=20<[email protected]>
    |To:[email protected]
    |Subject:=20=3D?UTF-8?B?VmFsZW50xKtuYSBkaWVuYSBuxIFrIQ=3D=3D?=3D;
    bh=fOfN6GO2cjh0ZljdK73x8C71zUg=;
    b=BGlxwArEBjFsawRUIO7e9DyOBaUvFs0xgUCPKVkOXVoF0ND5BKxQzCuDqpV3ek1kOGo/gn0UaCH0j405y/XXEfhTE83NN6C/V7zY2pcxf6iBeMAxxqy93CNL1UsAjRLhZOBhg2m1c47WPpHzZdn9dOxXM190YD6x+xqHo8Ydu+c=
Content-Type: multipart/alternative;
    boundary="=_6ec15ca19a7f51e90ef52ebaa3d3dfc1"
Message-Id: <[email protected]>
X-my-domain.com-MailScanner: Found to be clean
X-my-domain.com-MailScanner-SpamScore:  2.77
X-my-domain.com-MailScanner-From: [email protected]
X-MailScanner-Envelope-To: [email protected]


--=_6ec15ca19a7f51e90ef52ebaa3d3dfc1
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset="UTF-8"

我编辑了/etc/postfix/sender_access拒绝来自 的电子邮件sender-website.com。但这不起作用,因为 postfix 发现电子邮件来自不同的发件人/服务器。来自 postfix 日志文件:

Jan 27 14:15:05 myMailServer postfix/smtpd[12822]: connect from gw13.delivery-gate.com[72.29.83.9]
Jan 27 14:15:05 myMailServer postgrey[4304]: delayed 460 seconds: client=gw13.delivery-gate.com, from=4a590193769-#-#@delivery-gate.com, [email protected]
Jan 27 14:15:05 myMailServer postfix/policy-spf[12827]: : testing: stripped [email protected], stripped [email protected]
Jan 27 14:15:05 myMailServer postfix/policy-spf[12827]: : SPF pass: smtp_comment=Please see http://www.openspf.org/why.html?sender=4a590193769-1-589%40delivery-gate.com&ip=72.29.83.9&receiver=myMailServer: 72.29.83.0/24 contains 72.29.83.9, header_comment=myMailServer: domain of [email protected] 72.29.83.9 as permitted sender
Jan 27 14:15:05 myMailServer postfix/policy-spf[12827]: decided action=DUNNO
Jan 27 14:15:05 myMailServer postfix/smtpd[12822]: 999EA15F505: client=gw13.delivery-gate.com[72.29.83.9]
Jan 27 14:15:05 myMailServer postfix/cleanup[12829]: 999EA15F505: hold: header Received: from gw13.delivery-gate.com (gw13.delivery-gate.com [72.29.83.9])??by my-domain.com (ESMTP daemon) with ESMTP id 999EA15F505??for <[email protected]>; Mon, 27 Jan 2014 14:15:05 +0200 (EET) from gw13.delivery-gate.com[72.29.83.9]; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<gw13.delivery-gate.com>
Jan 27 14:15:05 myMailServer postfix/cleanup[12829]: 999EA15F505: message-id=<[email protected]>
Jan 27 14:15:05 myMailServer postfix/smtpd[12822]: disconnect from gw13.delivery-gate.com[72.29.83.9]

因此,当我在 thunderbird 中查看消息源时,我看到标头:。我如何阻止来自该发件人 (sender-website.com) 的电子邮件?阻止 IP 毫无意义,因为下次会有所不同。我也设置了 MailScanner,但它也看不到正确的标头。我已经在 MailScanner 中将该域列入黑名单。From: Blah blah blah <[email protected]>from

答案1

所以您已将其添加[email protected] REJECT到您的sender_access文件中,您是否已将其添加hash:/etc/postfix/sender_access到您的smtpd_recipient_restrictions =第一个选项中?

使用该选项您可能也会有更好的运气smtp_nested_header_checks,因为它允许您检查任何非 MIME 标头中的标识符。

答案2

重要的提示:

带有规则的 Postfix 文件:

/etc/postfix/sender_access

接受仅限域名(example.com),不是个人电子邮件地址[电子邮件保护])互联网上有一些“指南”,暗示它适用于两者,但它没有

作品:

microsoft.com REJECT
google.com DISCARD

不起作用:

[email protected] REJECT
[email protected] DISCARD

这就是它对某些人“不起作用”的原因。Postfix 文档中也没有明确说明这一点,也没有任何错误。

相关内容