Rule to block spoofed email

[Steen, Glenn]

One solution would be to check this in your MTA, if it has the
capability.
Since I use postfix I do this for the SMTP conversation via a
smtpd_sender_restrictions = permit_mynetworks,
             check_sender_access hash:/etc/postfix/deny_domain_spoof
... and in /etc/postfix/deny_domain_spoof I've simply put
mydomain.tld DISCARD
... which might seem a bit harsh, but is rather effective. One could
perhaps
do something similar for the header, but that's rather more tricky...

-- Glenn

> -----Original Message-----
> From: MailScanner mailing list 
> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Darrin
> Sent: den 1 december 2004 20:14
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Rule to block spoofed email
> 
> 
> Does anyone have an example of a rule or rules to only allow 
> a specific
> email address from a specified source IP? We are getting a lot of SPAM
> with the sending address of a user on the mail server, this in turn
> white lists the SPAM.
> 
> 
> Thanks
> --
> Darrin Powell
> LSSi Corp
> (919) 466-6803
> www.lssi.net/~dpowell
> 
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> 
> Support MailScanner development - buy the book off the website!
> 

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!