[Listwork] PROPOSAL: block messages from *@sarai.indymedia.org at the postfix level

[Micah Anderson]

Actually... this is done now at the postfix level, one of the changes
I made to postfix the other night...if I am to understand your
proposal correctly.

Anyone who sends mail to sarai who claims to be from *.indymedia.org
(including sarai, lists, etc.), who is *not* listed in the mynetworks
parameter will get REJECTED.

How this works is:

First we require a HELO:
smtpd_helo_required = yes

Then in the smtpd_helo_restrictions class we have:

smtpd_helo_restrictions = permit_mynetworks,
        check_helo_access hash:$checks_dir/helo_checks,
        permit

This permits mail that is in "mynetworks" (see below to see who is in
it), and then checks the file /etc/postfix/checks/helo_checks to see
if you HELO as any of the following, and if you do, then you are
REJECTED:		

indymedia.org                   REJECT You are not in indymedia.org
indymediapr.org                 REJECT You are not in indymediapr.org

Currently, my networks is set to the following. I dont know what all
of these are, I would like to document or remove the ones we don't know:

mynetworks = 127.0.0.0/8, 67.113.144.26/32, 216.187.116.98/32,
64.62.161.0/24, 216.82.161.253/32 , 66.196.35.96/30, 24.19.46.211/32

The second one is judi, the others are fairly loose netblocks and
should be tightened up or confirmed why they are there.



On Fri, 25 Jun 2004, Pabs wrote:

> Like the topic sez. Fucking spammers.
> Anyone see any adverse effects?
> 
> -- 
> Bye,
> Pabs
> 
> _______________________________________________
> listwork mailing list
> listwork at lists.indymedia.org
> http://lists.indymedia.org/mailman/listinfo/listwork