postfix delay

Steen, Glenn Glenn.Steen at AP1.SE
Thu Feb 17 12:39:56 GMT 2005


> -----Original Message-----
> From: MailScanner mailing list 
> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Drew Marshall
> Sent: den 17 februari 2005 13:08
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: postfix delay
> 
> 
> On Thu, February 17, 2005 11:39, Steen, Glenn said:
> > Thanks Drew. Thought so, but it's always better to have 
> more than one
> > pair of eyes....:)
> >
> > I found a lot of the anti-UCE docs on 
> http://www.postfix.org/docs.html
> > to be very helpful, 
> especially John Seymours
> > http://jimsun.linxnet.com/misc/postfix-anti-UCE.txt
> > ... And some nice rtfm on the smtpd_*_restrictions settings:-).
> 
> Yes, there is lots of good info out there. I spent ages 
> re-formatting my
> main.cf so I could easily identify, set up and maintain 
> particularly the
> smtpd_* options using nice stacked options starting with white spaces.
> That way I know what will be checked and in which order. I 
> have also been
> using an extension to the 'single Postfix instance' MailScanner rule,
> allowing me to block using other headers. Put all other lines 
> *above* the
Yep. I use that same space for "Header sanitizing" too... Have a longish
list of headers that I simply IGNORE (more than the usual stuff you find
on security-sage etc). Works very well. Can share upon request (perhaps
off list).

> Received: check for MailScanner but you can use regex to 
> block based on
> Subject: (Crossing threads slightly :-) ) From: or anything else you
> fancy. It's been very effective rejecting mail from a broken 
> mailer at my
> car insurance company (2000 copies of the same confirmaton in 
> 2 hours).
:-) May be a good indicator to use another insurance firm...:-)

Regards
-- Glenn
> 
> Drew
> 
> 
> --
> In line with our policy, this message has
> been scanned for viruses and dangerous
> content by MailScanner, and is believed to be clean.
> www.themarshalls.co.uk/policy
> 
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> 
> Support MailScanner development - buy the book off the website!
> 

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!




More information about the MailScanner mailing list