尽管我已经尽力过滤垃圾邮件,但即使在我将main.cf设置为不允许它并检查DNS等之后,我仍然会收到来自未知的垃圾邮件.即使在添加了一个pcre：到REJECT /.unknown./之后他们仍然通过,我不明白为什么！这是我的日志文件.第一个块是好的,它被拒绝了,它来自未知.第二个块是相同的,来自未知但它通过而不被拒绝.我希望拒绝所有“来自未知的联系”而不仅仅是其中一些. Centos上的postfix v2.8.4.我有什么想法我做错了吗？谢谢.
该块被拒绝
- Nov 24 12:00:30 sof postfix/smtpd[4632]: connect from unknown[91.99.51.137]
- Nov 24 12:00:30 sof postfix/smtpd[4632]: connect from unknown[91.99.51.137]
- Nov 24 12:00:31 sof postfix/smtpd[4632]: NOQUEUE: reject: RCPT from unknown[91.99.51.137]: 450 4.7.1 <91.99.51.137.parsonline.net>: Helo command rejected: Host not found; from=<emailsend@urbangroup.kz> to=<name@domain.com> proto=ESMTP helo=<91.99.51.137.parsonline.net>
- Nov 24 12:00:31 sof postfix/smtpd[4632]: NOQUEUE: reject: RCPT from unknown[91.99.51.137]: 450 4.7.1 <91.99.51.137.parsonline.net>: Helo command rejected: Host not found; from=<emailsend@urbangroup.kz> to=<name@domain.com> proto=ESMTP helo=<91.99.51.137.parsonline.net>
- Nov 24 12:00:31 sof /usr/lib64/plesk-9.0/psa-pc-remote[678]: Message aborted.
- Nov 24 12:00:31 sof /usr/lib64/plesk-9.0/psa-pc-remote[678]: Message aborted.
- Nov 24 12:00:31 sof /usr/lib64/plesk-9.0/psa-pc-remote[678]: Message aborted.
- Nov 24 12:00:31 sof postfix/smtpd[4632]: disconnect from unknown[91.99.51.137]
- Nov 24 12:00:31 sof /usr/lib64/plesk-9.0/psa-pc-remote[678]: Message aborted.
- Nov 24 12:00:31 sof postfix/smtpd[4632]: disconnect from unknown[91.99.51.137]
此块不会被拒绝
- Nov 24 14:16:09 sof postfix/smtpd[8221]: connect from unknown[190.237.252.197]
- Nov 24 14:16:09 sof postfix/smtpd[8221]: connect from unknown[190.237.252.197]
- Nov 24 14:16:18 sof postfix/smtpd[8221]: 9467B848368A: client=unknown[190.237.252.197]
- Nov 24 14:16:18 sof postfix/smtpd[8221]: 9467B848368A: client=unknown[190.237.252.197]
- Nov 24 14:16:23 sof postfix/cleanup[8428]: 9467B848368A: message-id=<9186950014.574880.74670.SendMail@domain.com>
- Nov 24 14:16:23 sof postfix/cleanup[8428]: 9467B848368A: message-id=<9186950014.574880.74670.SendMail@domain.com>
- Nov 24 14:16:25 sof /usr/lib64/plesk-9.0/psa-pc-remote[678]: handlers_stderr: SKIP
- Nov 24 14:16:25 sof /usr/lib64/plesk-9.0/psa-pc-remote[678]: handlers_stderr: SKIP
- Nov 24 14:16:25 sof /usr/lib64/plesk-9.0/psa-pc-remote[678]: SKIP during call 'check-quota' handler
- Nov 24 14:16:25 sof /usr/lib64/plesk-9.0/psa-pc-remote[678]: SKIP during call 'check-quota' handler
- Nov 24 14:16:25 sof postfix/qmgr[19747]: 9467B848368A: from=<Garcia.Ryan@iter.ru>,size=5285,nrcpt=1 (queue active)
- Nov 24 14:16:25 sof postfix/qmgr[19747]: 9467B848368A: from=<Garcia.Ryan@iter.ru>,nrcpt=1 (queue active)
- Nov 24 14:16:25 sof postfix-local[8481]: postfix-local: from=Garcia.Ryan@iter.ru,to=name@domain.com,dirname=/var/qmail/mailnames
- Nov 24 14:16:25 sof postfix-local[8481]: postfix-local: from=Garcia.Ryan@iter.ru,dirname=/var/qmail/mailnames
- Nov 24 14:16:25 sof spamc[8483]: connect(AF_UNIX) to spamd /tmp/spamd_full.sock Failed: No such file or directory
- Nov 24 14:16:25 sof spamc[8483]: connect(AF_UNIX) to spamd /tmp/spamd_full.sock Failed: No such file or directory
- Nov 24 14:16:25 sof postfix-local[8481]: handlers_stderr: PASS
- Nov 24 14:16:25 sof postfix-local[8481]: handlers_stderr: PASS
- Nov 24 14:16:25 sof postfix-local[8481]: PASS during call 'spam' handler
- Nov 24 14:16:25 sof postfix-local[8481]: PASS during call 'spam' handler
- Nov 24 14:16:25 sof postfix/pipe[8435]: 9467B848368A: to=<name@domain.com>,orig_to=<name@domain.com>,relay=plesk_virtual,delay=7.9,delays=7.9/0/0/0.02,dsn=2.0.0,status=sent (delivered via plesk_virtual service)
- Nov 24 14:16:25 sof postfix/pipe[8435]: 9467B848368A: to=<name@domain.com>,status=sent (delivered via plesk_virtual service)
- Nov 24 14:16:25 sof postfix/qmgr[19747]: 9467B848368A: removed
- Nov 24 14:16:25 sof postfix/qmgr[19747]: 9467B848368A: removed
- Nov 24 14:16:27 sof postfix/smtpd[8221]: disconnect from unknown[190.237.252.197]
- Nov 24 14:16:27 sof postfix/smtpd[8221]: disconnect from unknown[190.237.252.197]
这是我的main.cf文件的一部分
- smtpd_tls_cert_file = /etc/postfix/domain.pem
- smtpd_tls_key_file = $smtpd_tls_cert_file
- smtpd_tls_security_level = may
- smtpd_use_tls = yes
- smtp_tls_security_level = may
- smtp_use_tls = no
- smtpd_timeout = 3600s
- smtpd_proxy_timeout = 3600s
- disable_vrfy_command = yes
- smtpd_helo_required = yes
- smtpd_sender_restrictions =
- permit_mynetworks,permit_sasl_authenticated,check_sender_access pcre:/etc/postfix/rejected_domains,reject_non_fqdn_sender,reject_unknown_sender_domain,reject_unlisted_sender,permit
- smtpd_helo_restrictions =
- permit_mynetworks,reject_non_fqdn_helo_hostname,reject_invalid_helo_hostname,reject_unknown_helo_hostname,permit
- smtpd_recipient_restrictions =
- permit_sasl_authenticated,reject_invalid_hostname,reject_non_fqdn_hostname,reject_non_fqdn_recipient,reject_unknown_recipient_domain,permit_mynetworks,reject_rbl_client regexp:/etc/postfix/postfix_client_blacklist,reject_unauth_destination,check_client_access hash:/etc/postfix/rbl_whitelist,check_client_access pcre:/var/spool/postfix/plesk/no_relay.re,reject_rbl_client bl.spamcop.net,permit
这是postfix_client_blacklist文件
- /^.*unknown.*$/ REJECT FCrDNS # I tried all kinds of ways found on the Internet.
你在找
reject_unknown_client_hostname.
从documentation开始：
reject_unknown_client_hostname (with Postfix < 2.3:
reject_unknown_client)
Reject the request when 1) the client IP
address->name mapping fails,2) the name->address mapping fails,or 3)
the name->address mapping does not match the client IP address. This
is a stronger restriction than the
reject_unknown_reverse_client_hostname feature,which triggers only
under condition 1) above. The unknown_client_reject_code parameter
specifies the response code for rejected requests (default: 450). The
reply is always 450 in case the address->name or name->address lookup
Failed due to a temporary problem.
- smtpd_client_restrictions =
- permit_mynetworks,reject_unauth_pipelining,reject_unknown_client_hostname,permit
