Diferencia entre revisiones de «Antispam methods»
De gacq wiki
(→TMDA) |
(→postgrey) |
||
| Línea 2: | Línea 2: | ||
=postgrey= | =postgrey= | ||
| + | ==Install== | ||
apt-get install postgrey | apt-get install postgrey | ||
netstat -anp | grep 60000 | netstat -anp | grep 60000 | ||
tcp 0 0 127.0.0.1:60000 0.0.0.0:* LISTEN 18478/postgrey.pid | tcp 0 0 127.0.0.1:60000 0.0.0.0:* LISTEN 18478/postgrey.pid | ||
| − | /etc/postfix/main.cf | + | In /etc/postfix/main.cf add to "smtpd_recipient_restrictions =" |
check_policy_service inet:127.0.0.1:60000 | check_policy_service inet:127.0.0.1:60000 | ||
| + | Restart postfix: | ||
| + | /etc/init.d/postfix restart | ||
| + | |||
| + | ==Administration== | ||
| + | Lists the automatically whitelisted servers: | ||
| + | perl /usr/share/doc/postgrey/postgrey_clients_dump | ||
=Blacklist= | =Blacklist= | ||
Revisión del 10:21 20 nov 2006
postgrey
Install
apt-get install postgrey netstat -anp | grep 60000 tcp 0 0 127.0.0.1:60000 0.0.0.0:* LISTEN 18478/postgrey.pid
In /etc/postfix/main.cf add to "smtpd_recipient_restrictions ="
check_policy_service inet:127.0.0.1:60000
Restart postfix:
/etc/init.d/postfix restart
Administration
Lists the automatically whitelisted servers:
perl /usr/share/doc/postgrey/postgrey_clients_dump
Blacklist
/etc/postfix/main.cf
reject_rbl_client sbl-xbl.spamhaus.org
TMDA
Significantly reduce the amount of spam
- whitelists: accept mail from known, trusted senders.
- blacklists: refuse mail from undesired senders.
- challenge/response: allows unknown senders which aren't on the whitelist or blacklist the chance to confirm that their message is legitimate (non-spam).
- tagged addresses: special-purpose e-mail addresses such as time-dependent addresses, or addresses which only accept certain kinds of communication. These increase the transparency of TMDA for unknown senders by allowing them to safely circumvent the challenge/response system.
This methodology has the advantage of being very selective about what it allows in, while at the same time permitting legitimate, but previously unknown senders to reach you.
