<?xml version="1.0" encoding="UTF-8"?><rss version="2.0">
<channel>
    <title>Dažādas piezīmes Postfix. Aizliedzam citiem no ārpuses izmantot savu domēnu</title>
    <link>https://tvertne.org/blogi/?itemid=2128</link>
    <description>Diezgan noderīga lieta cīņā ar SPAMeriem... I want mail from the outside NOT to have a sender address of my own domain.</description>
    <language>lv</language>
    <image>
        <url>http://tvertne.org/logo-org.gif</url>
        <title>Postfix. Aizliedzam citiem no ārpuses izmantot savu domēnu</title>
        <link>https://tvertne.org/blogi/?itemid=2128</link>
    </image>
    <docs>http://backend.userland.com/rss</docs>
	    <item>
<title>Dažādas piezīmes Postfix. Aizliedzam citiem no ārpuses izmantot savu domēnu</title>
<link>https://tvertne.org/blogi/?itemid=2128</link>
<description>Diezgan noderīga lieta cīņā ar SPAMeriem... <br /><br /><a href="http://www.arschkrebs.de/postfix/postfix_restriction_classes3_en.shtml" >I want mail from the outside NOT to have a sender address of my own domain.</a><br />In <tt>main.cf</tt>, use:

<pre>smtpd_restriction_classes =
  has_our_domain_as_sender

has_our_domain_as_sender =
  check_sender_access hash:/etc/postfix/our_domain_as_sender
  reject

smtpd_recipient_restrictions =
  check_client_access hash:/etc/postfix/internal_networks
  #
  # If the Client is in the our networks 10.* or 192.168.*.* networks, we
  # return "has_our_domain_as_sender".
  # "has_our_domain_as_sender" is defined as
  # "check_sender_access hash:/etc/postfix/our_domain_as_sender"
  # which will only return OK if the sender is "example.com" or the 
  # empty sender (for bounces!!), otherwise reject.
  # 
  check_sender_access hash:/etc/postfix/not_our_domain_as_sender
  #
  # The client is not in 10.* or 192.168.*.* (otherwise
  # the previous restriction would have matched!).
  # Now we check the sender. If it's example.com NOW, then 
  # somebody from the outside is trying to use a example.com sender
  # Thus: 554 Bloody liar!
  #
  reject_unauth_destination
  # prevent relaying
  ... other spam checks ...
  permit

</pre>
<p>

/etc/postfix/internal_networks:
</p><pre>10               has_our_domain_as_sender
192.168          has_our_domain_as_sender
</pre>
<p>

/etc/postfix/our_domain_as_sender:
</p><pre>example.com       OK
&lt;&gt;               OK
</pre>
<p>

/etc/postfix/not_our_domain_as_sender:
</p><pre>example.com       554 Bloody liar!

</pre></description>
<pubDate></pubDate>
</item>
            </channel>
</rss>
        