Postfix antispam config

postfix-antispam

disable_vrfy_command = yes

smtpd_client_restrictions =
        reject_rhsbl_reverse_client dbl.spamhaus.org

smtpd_helo_required = yes
smtpd_helo_restrictions =
        reject_invalid_helo_hostname,
        reject_non_fqdn_helo_hostname,
        reject_rhsbl_helo dbl.spamhaus.org

smtpd_sender_restrictions =
        reject_non_fqdn_sender,
        check_sender_access hash:/etc/postfix/sender_access,
        reject_unknown_sender_domain,
        reject_rhsbl_sender dbl.spamhaus.org

smtpd_data_restrictions = reject_unauth_pipelining

postscreen_blacklist_action = enforce
postscreen_access_list =
        permit_mynetworks,
        cidr:/etc/postfix/spammers.cidr

postscreen_greet_action = enforce
postscreen_greet_banner = Silence is golden

postscreen_dnsbl_action = enforce
postscreen_dnsbl_threshold = 2
postscreen_dnsbl_sites =
        zen.spamhaus.org*3,
        bl.spamcop.net*1,
        psbl.surriel.com*2,
        bl.mailspike.net*2,
        proxies.dnsbl.sorbs.net*1,
        list.dnswl.org=127.0.[0..255].[1..3]*-5