Rejected email redirect

[Sampson, Aaron]

No way to know for sure if they are using dedicated IP's or not but good idea.  Plus there will be a lot of smaller (mom & pop) companies/stores that I think that asking them if they are using a dedicated IP will just make them look at us funny and ask what lang we are speaking.

From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Ryan Ivey
Sent: Wednesday, March 28, 2012 11:20 AM
To: MailScanner discussion
Subject: Re: Rejected email redirect


On Wed, Mar 28, 2012 at 12:02 PM, Sampson, Aaron <Sampson at p2sol.com<mailto:Sampson at p2sol.com>> wrote:
Just to clairify

We have been using the:
smtpd_helo_restrictions =
permit_mynetworks,
reject_non_fqdn_helo_hostname,
reject_invalid_helo_hostname,
reject_unknown_helo_hostname,  <-- this is the only one we are thinking about changing
permit
but that has been my main concern is that turning this off opens the door to a lot of spam, which also means I will have to hear about it from the users.


No need to turn it off.
Just add
     smtpd_helo_restrictions =
                   permit_mynetworks,
                   check_client_access hash:/etc/postfix/client_whitelist,
                   ...

Inside /etc/postfix/client_whitelist, put the IP Addresses (one on each line) of the new acquisitions with OK beside each.  I'm assuming those smaller companies have dedicated IP's they're coming from which could be determined through the merger/acquisition discussions.

but I am wondering if I comment out that option and allow the message to go through will MS be able to take that message and out it into quarantine
If you really want to move them to quarantine, then create a spamassassin rule based on the header finding those IP Addresses and add a score high enough so it winds up as High Scoring Spam.  Seems redundant (and resource intensive) to allow them only in to then block them again.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120328/dc1fda49/attachment.html