Postfix reject_rbl_client 黑名单不起作用

Question

我有一个使用 Postfix 的邮件服务器 (iRedMail)。我收到了很多垃圾邮件，所以我修改了 /etc/postfix/main.cf 文件并将 smtpd_recipient_restrictions 设置为：

smtpd_recipient_restrictions =
        reject_rbl_client zen.spamhaus.org,
        reject_rbl_client bl.spamcop.net,
        reject_rbl_client cbl.abuseat.org,
        reject_rbl_client b.barracudacentral.org,
        reject_invalid_hostname,
        reject_unknown_sender_domain,
        reject_unknown_recipient_domain,
        check_policy_service inet:127.0.0.1:7777,
        check_policy_service inet:127.0.0.1:10031,
        reject_non_fqdn_sender,
        reject_non_fqdn_hostname,
        reject_non_fqdn_recipient,
        reject_unlisted_recipient,
        permit_mynetworks,
        permit_sasl_authenticated,
        reject_unauth_destination,
        permit

然而，垃圾邮件仍然来自这些黑名单上的 IP。

如果我查看我的 /var/log/mail.log 文件，我会看到消息通过。这是一个例子：

Jan 11 01:09:19 mailhost postfix/smtpd[935]: DA5736B578: client=localhost[127.0.0.1]
Jan 11 01:09:19 mailhost postfix/cleanup[922]: DA5736B578: message-id=<ObreptitiousSoundness_300b221f33a2b213a8dc0ee683baadacnick@mydomain.com>
Jan 11 01:09:19 mailhost postfix/qmgr[31818]: DA5736B578: from=<Trump.Business.Success@aslk.riflebuzz.review>, size=6081, nrcpt=1 (queue active)
Jan 11 01:09:19 mailhost postfix/smtpd[935]: disconnect from localhost[127.0.0.1]
Jan 11 01:09:19 mailhost amavis[737]: (00737-01) Passed CLEAN, LOCAL [89.185.243.3] [89.185.243.3] <Trump.Business.Success@aslk.riflebuzz.review> -> <nick@mydomain.com>, Message-ID: <ObreptitiousSoundness_300b221f33a2b213a8dc0ee683baadacnick@mydomain.com>, mail_id: NBO0lwDs11eq, Hits: -1.097, size: 5620, queued_as: DA5736B578, 647 ms
Jan 11 01:09:19 mailhost postfix/smtp[930]: D662C6B575: to=<nick@mydomain.com>, relay=127.0.0.1[127.0.0.1]:10024, delay=2.1, delays=1.5/0.01/0.02/0.65, dsn=2.0.0, status=sent (250 2.0.0 from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as DA5736B578)

当我在 MXToolBox 上查找 89.185.243.3 时，它列在 Spamhaus Zen 上。

我的配置不正确吗？我注意到显然项目的顺序有所不同。

谢谢！

Answer 1

您的配置不是最佳的，最好在客户端限制中使用 RBL。这是我的建议，尽管有些建议有点限制，而且我不知道您的 Postfix 的完整设置。这是一个示例，有关参数 \xe2\x80\xa6 的更多信息，请参阅 Postfix 手册和建议

\n\n

\nsmtpd_helo_restrictions =\n    permit_mynetworks,\n    permit_sasl_authenticated,\n    reject_unauth_pipelining,\n    reject_non_fqdn_hostname\n\nsmtpd_client_restrictions =\n    permit_mynetworks,\n    permit_sasl_authenticated,\n    reject_unauth_destination,\n    reject_rbl_client zen.spamhaus.org,\n    reject_rbl_client bl.spamcop.net,\n    reject_rbl_client cbl.abuseat.org,\n    reject_rbl_client b.barracudacentral.org\n\nsmtpd_sender_restrictions =\n    reject_non_fqdn_sender,\n    reject_unknown_sender_domain,\n    permit_mynetworks,\n    permit_sasl_authenticated,\n    reject_authenticated_sender_login_mismatch,\n    reject_sender_login_mismatch\n\nsmtpd_recipient_restrictions =\n    reject_unknown_recipient_domain,\n    check_policy_service inet:127.0.0.1:7777,\n    check_policy_service inet:127.0.0.1:10031,\n    reject_non_fqdn_recipient,\n    reject_unlisted_recipient,\n    permit\n

\n