Добрый день! нужна помощь в неравной борьбе со спамерами) вот мой конфиг postfix (та часть которая касается вопроса):
smtpd_restriction_classes = verify_sender, rbl_cbl_abuseat_org, rbl_sbl_spamhaus_org, rbl_dul_ru, rbl_spamcop, white_client_ip, black_client_ip, block_dsl, helo_access, white_client, black_client, mx_access verify_sender = reject_unverified_sender, permit rbl_cbl_abuseat_org = reject_rbl_client cbl.abuseat.org rbl_dul_ru = reject_rbl_client dul.ru rbl_sbl_spamhaus_org = reject_rbl_client sbl.spamhaus.org rbl_spamcop = reject_rbl_client bl.spamcop.net white_client_ip = check_client_access pcre:/etc/postfix/config/white_client_ip black_client_ip = check_client_access pcre:/etc/postfix/config/black_client_ip white_client = check_sender_access pcre:/etc/postfix/config/white_client black_client = check_sender_access pcre:/etc/postfix/config/black_client block_dsl = regexp:/etc/postfix/config/block_dsl helo_access = check_helo_access pcre:/etc/postfix/config/helo_checks mx_access = check_sender_mx_access cidr:/etc/postfix/config/mx_access smtpd_client_restrictions = white_client_ip, black_client_ip, white_client, black_client, helo_access, block_dsl, rbl_dul_ru, rbl_sbl_spamhaus_org, rbl_spamcop, rbl_cbl_abuseat_org, permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination, reject_unauth_pipelining, reject_unknown_address, reject_unknown_recipient_domain, reject_unknown_sender_domain smtpd_sender_restrictions = white_client, white_client_ip, black_client_ip, reject_unknown_recipient_domain, reject_unknown_sender_domain, reject_non_fqdn_recipient, reject_non_fqdn_sender, permit_sasl_authenticated, permit_mynetworks, mx_access, reject_unlisted_sender, reject_unauth_destination smtpd_recipient_restrictions = verify_sender, white_client, helo_access, reject_non_fqdn_sender, reject_non_fqdn_recipient, reject_unknown_sender_domain, reject_unknown_recipient_domain, reject_unauth_pipelining, permit_sasl_authenticated, permit_mynetworks, reject_unlisted_recipient, reject_unknown_address, reject_unauth_destination, reject_multi_recipient_bounce, check_policy_service inet:localhost:10023 smtpd_data_restrictions = reject_unauth_pipelining, reject_multi_recipient_bounce, permit smtp_skip_5xx_greeting = no smtpd_reject_unlisted_sender = yes smtpd_reject_unlisted_recipient = yes
Прописаны правильно MX, есть DKIM, SPF записи (DMARC нету), включен грейлистинг. Так вот, периодически валится спам на info@ и contact@ ящики его отличительная черта что и отправитель и получатель никак не связаны с почтовым доменом но в заголовках есть отношение к почтовому домену:
Received: from mail.spammers.net (mail.spammers.net [ip-address]) by my-post.domain.com (Postfix) with ESMTP id 5B56A00000 for <[email protected]>; Sun, 2 Jul 2017 20:42:10 +0000 (CEST) Message-ID: <[email protected]> Reply-To: "Original SPAM" <[email protected]> From: "Original SPAM" <[email protected]> To: <[email protected]> Subject: Subj spammers Date: Sun, 02 Jul 2017 20:14:39 +0000
Как фильтровать такие письма? есть spamassasin но даже после обучения его на примере 10-ов писем подобных, он пропускает такие письма.