postfix設定過濾垃圾郵件的Mail Gateway

利用postfix+spamassassin + 黑名單資料庫 替exchange 作第一線的spam過濾

1. 在CentOS 6.2 安裝 postfix + spamassass
2. 設定postfix 作mail gateway

修改postfix 設定

vi  /etc/postfix/main.cf

myhostname = mail.pmail.idv.tw

mydomain = pmail.idv.tw

net_interfaces = all

relay_domains = pmail.idv.tw

mydestination = $myhostname, localhost.$mydomain, localhost

transport_maps = hash:/etc/postfix/transport

設定 黑名單過濾 Open Relay 主機

smtpd_recipient_restrictions =
        permit_mynetworks
        reject_unauth_destination
        reject_rbl_client cbl.abuseat.org
        reject_rbl_client bl.spamcop.net
        reject_rbl_client sbl-xbl.spamhaus.org

 

設定是將 pmail.idv.tw 的信relay至後端的exchange Server

vi /etc/postfix/transport

domain.com smtp:[192.168.x.x]

postmap /etc/postfix/transport

MailScanner + spamassassin 設定 請參考

https://blog.pmail.idv.tw/?p=608

 

利用gmail 寄一封由mail測試，log 如下 紅色字體 確實有relay 至後端Exchange

————————————————————– 

May 15 23:02:45 localhost postfix/smtpd[25777]: connect from mail-we0-f182.google.com[74.125.82.182]
May 15 23:02:46 localhost postfix/smtpd[25777]: 14E901E0709: client=mail-we0-f182.google.com[74.125.82.182]
May 15 23:02:46 localhost postfix/cleanup[25782]: 14E901E0709: hold: header Received: from mail-we0-f182.google.com (mail-we0-f182.google.com [74.125.82.182])??by mail.pmail.idv.tw (Postfix) with ESMTP id 14E901E0709??for <roy.lee@pmail.idv.tw>; Tue, 15 May 2012 23:02:45 +080 from mail-we0-f182.google.com[74.125.82.182]; from=<roy.mis0916@gmail.com> to=<roy.lee@pmail.idv.tw> proto=ESMTP helo=<mail-we0-f182.google.com>
May 15 23:02:46 localhost postfix/cleanup[25782]: 14E901E0709: message-id=<CANYCmc29ALE13ckNeNEFYon4ZJJHEsv3RO96Utj-heSV=h-jLw@mail.gmail.com>
May 15 23:02:46 localhost MailScanner[25498]: New Batch: Scanning 1 messages, 2377 bytes
May 15 23:02:46 localhost MailScanner[25498]: Virus and Content Scanning: Starting
May 15 23:02:48 localhost MailScanner[25498]: Requeue: 14E901E0709.A5DA0 to DDDE01E0718
May 15 23:02:48 localhost postfix/qmgr[25438]: DDDE01E0718: from=<roy.mis0916@gmail.com>, size=1676, nrcpt=1 (queue active)
May 15 23:02:48 localhost MailScanner[25498]: Uninfected: Delivered 1 messages
May 15 23:02:48 localhost MailScanner[25498]: Deleted 1 messages from processing-database
May 15 23:02:48 localhost postfix/smtp[25789]: DDDE01E0718: to=<roy.lee@pmail.idv.tw>, relay=192.168.3.15[192.168.3.15]:25, delay=2.6, delays=2.3/0.01/0/0.27, dsn=2.6.0, status=sent (250 2.6.0 <CANYCmc29ALE13ckNeNEFYon4ZJJHEsv3RO96Utj-heSV=h-jLw@mail.gmail.com> [InternalId=2750] Queued mail for delivery)
May 15 23:02:48 localhost postfix/qmgr[25438]: DDDE01E0718: removed

————————————————————–

下列 Log 為參考 cbl.abuseat.org 黑名單資料庫被過濾的log

NOQUEUE: reject: RCPT from unknown[219.151.48.242]: 554 5.7.1 Service unavailable; Client host [219.151.48.242] blocked using cbl.abuseat.org; Blocked – see http://cbl.abuseat.org/lookup.cgi?ip=219.151.48.242; from=<bobhoyqpqhl@cht.com.tw> to=<lee@pmail.idv.tw> proto=SMTP helo=<x.x.x.x>

以上這樣的設定,就已經可以檔掉蠻多確實為spam 的郵件,也可以降低後端郵件主機不必要的垃圾流量

本篇瀏覽人數: 10246