[prev in list] [next in list] [prev in thread] [next in thread] 

List:       amavis-user
Subject:    Re: Redirect all dsn to single address?
From:       Michael Scheidell <michael.scheidell () secnap ! com>
Date:       2011-07-12 15:43:25
Message-ID: 4E1C6B9D.4030903 () secnap ! com
[Download RAW message or body]

On 7/12/11 11:27 AM, Mikael Bak wrote:
> Lars Jørgensen wrote:
> > > This is not exactly what you asked for, but it solved the backscatter
> > > problems for our users:
take it out of master.cf, put this in main.cf:

check_sender_access pcre:$postfix/checkbs.rc

in checkbs.rc:

/^(<>$|postmaster@|MAILER-DAEMON)/ reject_rbl_client ips.backscatterer.org

this only checks bounces.
be aware, that lusers at microsoft live programmed their password 
check/reset email to look like a bounce, and, ms live has been on bs.org 
for some time, due to current issues.



> > > http://www.backscatterer.org/
> > That looks interesting, however if I put this in master.cf:
> > 
> > smtp      inet  n       -       n       -       -       smtpd
> > -o content_filter=amavisfeed:[127.0.0.1]:10024
> > -o smtpd_recipient_restrictions=check_sender_access \
> > dbm:/etc/postfix/check_backscatterer 
> > I get this:
> > 
> > postfix/smtpd[22684]: fatal: parameter "smtpd_recipient_restrictions": specify at \
> > least one working instance of: check_relay_domains, reject_unauth_destination, \
> > reject, defer or defer_if_permit 
> > It seems I am missing something? I know this question probably belong to the \
> > backscatterer.org people, but as you know of it, maybe you can be of assistance. 
> > 
> Hi Lars,
> 
> For me it seems a bit strange to have this on the master.cf. But I have
> no idea how your configuration is like.
> 
> I have it in my main.cf together with all other restriction classes.
> 
> HTH,
> Mikael


-- 
Michael Scheidell, CTO
o: 561-999-5000
d: 561-948-2259
 >*| *SECNAP Network Security Corporation

    * Best Mobile Solutions Product of 2011
    * Best Intrusion Prevention Product
    * Hot Company Finalist 2011
    * Best Email Security Product
    * Certified SNORT Integrator


______________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(r). 
For Information please see http://www.secnap.com/products/spammertrap/
______________________________________________________________________  


[Attachment #3 (text/html)]

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
  <head>
    <meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
  </head>
  <body bgcolor="#ffffff" text="#000000">
    On 7/12/11 11:27 AM, Mikael Bak wrote:
    <blockquote cite="mid:4E1C67D3.4060807@t-online.hu" type="cite">
      <pre wrap="">Lars Jørgensen wrote:
</pre>
      <blockquote type="cite">
        <blockquote type="cite">
          <pre wrap="">This is not exactly what you asked for, but it solved the \
backscatter problems for our users:
</pre>
        </blockquote>
        <pre wrap="">
</pre>
      </blockquote>
    </blockquote>
    take it out of master.cf, put this in main.cf:<br>
    <br>
    check_sender_access pcre:$postfix/checkbs.rc<br>
    <br>
    in checkbs.rc:<br>
    <br>
    /^(&lt;&gt;$|postmaster@|MAILER-DAEMON)/ reject_rbl_client
    ips.backscatterer.org<br>
    <br>
    this only checks bounces.<br>
    be aware, that lusers at microsoft live programmed their password
    check/reset email to look like a bounce, and, ms live has been on
    bs.org for some time, due to current issues.<br>
    <br>
    <br>
    <br>
    <blockquote cite="mid:4E1C67D3.4060807@t-online.hu" type="cite">
      <blockquote type="cite">
        <pre wrap=""></pre>
        <blockquote type="cite">
          <pre wrap=""><a class="moz-txt-link-freetext" \
href="http://www.backscatterer.org/">http://www.backscatterer.org/</a> </pre>
        </blockquote>
        <pre wrap="">
That looks interesting, however if I put this in master.cf:

smtp      inet  n       -       n       -       -       smtpd
    -o content_filter=amavisfeed:[127.0.0.1]:10024
    -o smtpd_recipient_restrictions=check_sender_access \
dbm:/etc/postfix/check_backscatterer

I get this:

postfix/smtpd[22684]: fatal: parameter "smtpd_recipient_restrictions": specify at \
least one working instance of: check_relay_domains, reject_unauth_destination, \
reject, defer or defer_if_permit

It seems I am missing something? I know this question probably belong to the \
backscatterer.org people, but as you know of it, maybe you can be of assistance.


</pre>
      </blockquote>
      <pre wrap="">
Hi Lars,

For me it seems a bit strange to have this on the master.cf. But I have
no idea how your configuration is like.

I have it in my main.cf together with all other restriction classes.

HTH,
Mikael
</pre>
    </blockquote>
    <br>
    <br>
    <div class="moz-signature">-- <br>
      Michael Scheidell, CTO<br>
      o: 561-999-5000<br>
      d: 561-948-2259<br>
      <font color="#999999">&gt;</font><font color="#cc0000"> <b>| </b></font>SECNAP
      Network Security Corporation
      <style type="text/css">
<!--
.unnamed1 {
	margin: 1em;
	padding: 1px;
} -->
</style>
      <ul class="unnamed1">
        <li>Best Mobile Solutions Product of 2011</li>
        <li>Best Intrusion Prevention Product</li>
        <li>Hot Company Finalist 2011</li>
        <li>Best Email Security Product</li>
        <li>Certified SNORT Integrator</li>
      </ul>
    </div>
  
<br>
<div id="disclaimer.secnap.com"><hr />
<p>This email has been scanned and certified safe by SpammerTrap&reg;.
<br />For Information please see
<a href="http://www.secnap.com/products/spammertrap/">http://www.secnap.com/products/spammertrap/</a></p> \
<hr /></div> <br>
</body>
</html>



[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic