我的 Centos 服务器上运行着 Fail2Ban。(配置如下)
在我的var/log/messages我注意到一些非常奇怪的事情:
Jun 19 12:09:32 localhost fail2ban.actions: INFO [postfix] 114.43.245.205 already banned
Run Code Online (Sandbox Code Playgroud)
我配置了 Fail2Ban 以将禁止的 IP 添加到 iptables。
我的 jail.conf:
[postfix]
enabled = true
filter = postfix
action = iptables
port = smtp,ssmtp
filter = postfix
logpath = /var/log/maillog
bantime = 43200
maxretry = 2
Run Code Online (Sandbox Code Playgroud)
我的 postfix.conf:
[INCLUDES]
before = common.conf
[Definition]
failregex = reject: RCPT from (.*)\[<HOST>\]: 550 5.1.1
reject: RCPT from (.*)\[<HOST>\]: 450 4.7.1
reject: RCPT from (.*)\[<HOST>\]: 554 5.7.1
reject: RCPT from …
Run Code Online (Sandbox Code Playgroud) 我收到了一些客户的投诉,他们的电子邮件被拒绝。我没有更改我的配置,所以这一定是 spamhaus 的问题。
我正在使用 spamhaus 的以下设置运行 Postfix:
smtpd_sender_restrictions = [...]
reject_rhsbl_helo dbl.spamhaus.org,
reject_rhsbl_reverse_client dbl.spamhaus.org,
reject_rhsbl_sender dbl.spamhaus.org,
Run Code Online (Sandbox Code Playgroud)
以下是我的一些客户被阻止的日志:
NOQUEUE: reject: RCPT from mx08-0020e701.pphosted.com[91.207.212.174]: 554 5.7.1 Service unavailable; Unverified Client host [mx08-0020e701.pphosted.com] blocked using dbl.spamhaus.org; from=<prvs=122944b5d5=XXX.XXX@XXX.com> to=<XXX@XXX.de> proto=ESMTP helo=<mx07-0020e701.pphosted.com>
NOQUEUE: reject: RCPT from mailout09.t-online.de[194.25.134.84]: 554 5.7.1 Service unavailable; Sender address [XXX@t-online.de] blocked using dbl.spamhaus.org; from=<XXX@t-online.de> to=<info@XXX.de> proto=ESMTP helo=<mailout09.t-online.de>
NOQUEUE: reject: RCPT from mail-fr2deu01on2094.outbound.protection.outlook.com[40.107.135.94]: 554 5.7.1 Service unavailable; Helo command [DEU01-FR2-obe.outbound.protection.outlook.com] blocked using dbl.spamhaus.org; from=<#XXX@XXX.com> to=<XXX@XXX.de> proto=ESMTP helo=<DEU01-FR2-obe.outbound.protection.outlook.com>
Run Code Online (Sandbox Code Playgroud)
有人知道我如何解决这个问题(不暴露我的邮件服务器)?