postfix/anti-uce.sh



#!/bin/bash

set -e

paramdir="/etc/local-COMMON/postfix"

function getlinesfromfile() {
    param="$1"
    echo -n "$param = "
    cat $paramdir/$param | grep -v '^#' | sed 's/#.*//' | tr "\n" "," | sed -e 's/^[, ]*//' -e 's/[, ]\+/,/g' -e 's/,$//'
}

postconf -e "smtpd_helo_required = yes"
postconf -e "`getlinesfromfile permit_mx_backup_networks`"
postconf -e "`getlinesfromfile maps_rbl_domains`"
postconf -e "`getlinesfromfile smtpd_recipient_restrictions`"

/etc/init.d/postfix reload

# Based on this: http://jimsun.linxnet.com/misc/postfix-anti-UCE.txt
# Support for trusted MX backup networks added
# PCRE stuff avoided, as PCRE is only optional on newest Debian packages
# RBLs replaced with those recommended by http://www.antispews.org/

# Here's a convenient overview of different blackholes:
#   http://rbls.org/