Blocking Junker Mail From Postfix

Belakangan ini server di block ISP terus karena di tuduh mengunakan spam, awalnya gw pikir orang scan scan dan masuk ke banyakan email, setelah gw liat ternyata bener ada spammer yang mengunakan smptpnya.

Kejadiannya Mail Queue gw dah sampe 20.000 an dan setiap dari firewall isp di realse kembali tetep aja selalu ke block lagi akhirnya gw coba hapus queuenya dengan command

/opt/zimbra/postfix/sbin/postsuper -d ALL

Dan sesudah itu kembali gw check ternyata masih banyak saja emailnya dan emailnya itu secara acak , jadi gw berkesimpulan ini kerjaan spammer pake smtp relay server gw. dan akhirnya gw block lagi

### SMTP Restrictions
smtpd_client_restrictions = permit_mynetworks,
                                reject_invalid_hostname,
                                reject_rbl_client zen.spamhaus.org,
                                reject_unknown_client,
                                permit

smtpd_helo_restrictions = permit_mynetworks,
                                check_helo_access hash:/etc/postfix/helo_access,
                                reject_unauth_pipelining,
                                reject_non_fqdn_hostname,
                                reject_invalid_hostname,
                                warn_if_reject reject_unknown_hostname,
                                permit

smtpd_recipient_restrictions =  reject_non_fqdn_sender,
                                reject_non_fqdn_recipient,
                                reject_non_fqdn_hostname,
                                reject_invalid_hostname,
                                permit_mynetworks,
                                reject_unauth_pipelining,
                                reject_unknown_sender_domain,
                                reject_unknown_recipient_domain,
                                reject_unauth_destination,
                                reject_unknown_client,
                                permit

smtpd_sender_restrictions =  permit_mynetworks,
                                reject_non_fqdn_sender,
                                reject_unknown_sender_domain,
                                reject_unknown_address

smtpd_etrn_restrictions = permit_mynetworks,
                                reject

smtpd_data_restrictions = reject_unauth_pipelining,
                                reject_multi_recipient_bounce,
                                permit

#####################  END  #####################################################

 Dan gw coba minta orang ISP nya untuk merealsenya kembali and work great !!

Categories: Server