iRedMail 开源邮件服务解决方案 - 请问如何拒收广告信的return address 信呢？

回复: 请问如何拒收广告信的return address 信呢？

null@example.com (ZhangHuangbin) — Tue, 28 Oct 2014 08:42:14 +0000

要替换为你的实际的 helo 标识，不是邮件域名。建议你仔细看一下文档。

回复: 请问如何拒收广告信的return address 信呢？

null@example.com (bruce_wu) — Tue, 28 Oct 2014 08:32:34 +0000

我测试了这一部份，
设定如下，且将porcupine\.org 换成我的域名
但这类型的信件一样无法挡下..

/etc/postfix/main.cf:
header_checks = pcre:/etc/postfix/header_checks
body_checks = pcre:/etc/postfix/body_checks

/etc/postfix/header_checks:
# Do not indent the patterns between "if" and "endif".
if /^Received:/
/^Received: +from +(porcupine\.org) +/
reject forged client name in Received: header: $1
/^Received: +from +[^ ]+ +$([^ ]+ +[he]+lo=|[he]+lo +)(porcupine\.org)$/
reject forged client name in Received: header: $2
/^Received:.* +by +(porcupine\.org)\b/
reject forged mail server name in Received: header: $1
endif
/^Message-ID:.* /^Message-ID:.*@(porcupine\.org)/
reject forged domain name in Message-ID: header: $1

/etc/postfix/body_checks:
# Do not indent the patterns between "if" and "endif".
if /^[> ]*Received:/
/^[> ]*Received: +from +(porcupine\.org) /
reject forged client name in Received: header: $1
/^[> ]*Received: +from +[^ ]+ +$([^ ]+ +[he]+lo=|[he]+lo +)(porcupine\.org)$/
reject forged client name in Received: header: $2
/^[> ]*Received:.* +by +(porcupine\.org)\b/
reject forged mail server name in Received: header: $1
endif
/^[> ]*Message-ID:.* /^[> ]*Message-ID:.*@(porcupine\.org)/
reject forged domain name in Message-ID: header: $1

回复: 请问如何拒收广告信的return address 信呢？

null@example.com (ZhangHuangbin) — Tue, 28 Oct 2014 06:24:44 +0000

看这里：
http://www.postfix.org/BACKSCATTER_README.html

请问如何拒收广告信的return address 信呢？

null@example.com (bruce_wu) — Mon, 27 Oct 2014 08:56:34 +0000

==== 必填信息。没有填写将不予回复 ====
- iRedMail 版本号：iRedMail 0.73
- 使用哪个数据库存储用户帐号（OpenLDAP，MySQL，PostgreSQL）：MySQL
- 使用的 Linux/BSD 发行版名称及版本号：CentOS 6.5
- 与您的问题相关的日志信息：
====
Received: from localhost (unknown [127.0.0.1])
by mail.bruce.com (iRedmail) with ESMTP id CDF121670DF4
for ; Thu, 6 Mar 2014 08:37:55 +0000 (UTC)
Received: from mail.bruce.com ([127.0.0.1])
by localhost (mail.bruce.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id m04DaNKMsubr for ;
Thu, 6 Mar 2014 16:37:55 +0800 (CST)
Received: from bruce.com (unknown [122.160.24.25])
by mail.bruce.com (iRedmail) with ESMTPA id BFEBC1670DEB;
Thu, 6 Mar 2014 08:37:09 +0000 (UTC)
Return-Path:
Reply-To:
From: "nam kwon"
To: "easter lee" ,
"Jook kim" ,
"kimjin2484" ,
"nicebo88" ,
"oh davidd" ,
"skpclove" ,
"sook heui park" ,
"su Lee" ,
"su kyung park" ,
"un kwon" ,
"yanghwa lee" ,
,
"pastorwhang" ,
"jooahn6" ,
"nicebo88" ,
"chungscho" ,
"Soonyi Kim" ,
"hyunachai" ,
"maeyoung"
Subject: nam kwon

说明：
1. 122.160.24.25 并不是我的 server ip
2. 要如何避免这种问题发生?
3. 如何配置拒收Return-Path 被盗用的信件