summaryrefslogtreecommitdiff
path: root/postfix/anti-uce.sh
blob: c0619a8476caeee2d589070589913a098bb9d438 (plain)
  1. #!/bin/sh
  2. postconf -e "smtpd_helo_required = yes"
  3. postconf -e "permit_mx_backup_networks = /etc/local-COMMON/postfix/mx_networks"
  4. postconf -e "maps_rbl_domains = "`cat /etc/local-COMMON/postfix/rbl_lookup_hosts`
  5. postconf -e "smtpd_recipient_restrictions = reject_invalid_hostname,reject_non_fqdn_hostname,reject_non_fqdn_sender,reject_non_fqdn_recipient,reject_unknown_sender_domain,reject_unknown_recipient_domain,reject_unauth_pipelining,permit_mynetworks,permit_mx_backup,reject_unauth_destination,reject_maps_rbl,reject"
  6. # The above is based on this:
  7. # http://jimsun.linxnet.com/misc/postfix-anti-UCE.txt
  8. # with the addition of MX backup networks and the PCRE stuff avoided
  9. # (PCRE is optional on newest Debian packages)
  10. # Here's a convenient overview of different blackholes:
  11. # http://rbls.org/