smtp – KutuKupret

postfix 2.8-20100213 postscreen

Mar 142010

I’ve been experimenting with postfix 2.8-20100213 “postscreen” feature on my development server.this feature is very usefull for detecting/dropping misbehavior smtp client.

Configuration :

main.cf

postscreen_greet_action = drop
postscreen_dnsbl_sites = zen.spamhaus.org, spam.ipv6.kutukupret.com
postscreen_hangup_action = drop
postscreen_dnsbl_action = drop

master.cf

smtp      inet  n       -       n       -       1       postscreen
smtpd   pass    -       -       n       -       -       smtpd
  -o content_filter=spamchk:dummy
dnsblog  unix   -        -      n       -       0       dnsblog

Logs

Mar 14 12:56:24 fire postfix/postscreen[19999]: PASS OLD 2001:4f8:fff6::35 
Mar 14 12:56:24 fire postfix/smtpd[20001]: connect from mx2.freebsd.org[2001:4f8:fff6::35]
--- snipped ---
Mar 14 12:56:28 fire postfix/pipe[20021]: 6979049168: to=<myuser@ipv6.kutukupret.com>, relay=maildrop, delay=0.09, delays=0.01/0.02/0/0.06, dsn=2.0.0, status=sent (delivered via maildrop service)

But i think i’ll wait until this feature is in stable release stage before applying on production machine

Postfix Smtp Outgoing IP Rotator using iptables

iptables, postfix, smtp 50 Responses »

Nov 302009

This is the scheme

e.g:

I got 5 Public IPs. i’m Gonna configure them, so Postfix can use multiple interfaces/ips for outgoing smtp connections.

First we need creating Interface aliases for those 5 public IPs.

In my system, using fedora:

# cd /etc/sysconfig/network-scripts/
# cp ifcfg-eth0 ifcfg-eth0:1

Edit ifcfg-eth0:1

# vi ifcfg-eth0\:1

DEVICE=eth0 <-- default device
HWADDR=XX:XX:XX:XX:XX:XX
ONBOOT=yes
TYPE=Ethernet
BOOTPROTO=none
IPADDR=202.XXX.XX.2 <-- default eth0 IP address
PREFIX=24
GATEWAY=202.XXX.XX.1
DNS1=202.XXX.XX.XX

Change DEVICE and IPADDR parameters

Page 1 of 6 1 2 3 … 5 6 Older Entries