Skip to content

Instantly share code, notes, and snippets.

@matheo
Created November 29, 2015 01:25
Show Gist options
  • Save matheo/bad92ad2d5f111abb6e1 to your computer and use it in GitHub Desktop.
Save matheo/bad92ad2d5f111abb6e1 to your computer and use it in GitHub Desktop.
Postfix restrictions
smtpd_helo_restrictions =
permit_mynetworks,
warn_if_reject,
reject_invalid_helo_hostname,
reject_non_fqdn_helo_hostname,
reject_rhsbl_helo dbl.spamhaus.org,
permit
smtpd_sender_restrictions =
warn_if_reject,
reject_non_fqdn_sender,
check_sender_access hash:/etc/postfix/sender_access,
reject_rhsbl_sender dbl.spamhaus.org,
permit
smtpd_relay_restrictions =
warn_if_reject,
reject_unauth_destination,
permit_mynetworks
smtpd_client_restrictions =
warn_if_reject,
reject_rbl_client bl.spamcop.net,
permit
smtpd_recipient_restrictions =
permit_mynetworks,
warn_if_reject,
reject_unknown_recipient_domain,
reject_unauth_destination,
reject_unauth_pipelining,
reject_invalid_hostname,
reject_non_fqdn_hostname,
reject_non_fqdn_recipient,
check_sender_access pcre:/etc/postfix/sender_access.pcre,
reject_rbl_client dnsbl.sorbs.net,
reject_rbl_client zen.spamhaus.org,
reject_rhsbl_reverse_client dbl.spamhaus.org,
permit
smtpd_data_restrictions = reject_unauth_pipelining
#smtpd_end_of_data_restrictions = check_policy_service unix:private/policy
strict_rfc821_envelopes = yes
disable_vrfy_command = yes
unknown_address_reject_code = 554
unknown_hostname_reject_code = 554
unknown_client_reject_code = 554
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment