Help me punt email before it wastes postgreys time.

drstein — Sat, 01 Dec 2007 17:50:30 -0800

Spammy spammers sending crap to my mail server are wasting time and resources. I'm using postfix & postgrey (greylisting) on this new server, but.... See the log section here:

Nov 30 19:34:43 heap postfix/smtpd[27141]: NOQUEUE: reject: RCPT from unknown[201.240.117.167]: 450 4.7.1 <7>: Recipient address rejected: Greylisted for 18 seconds (see http://isg.ee.ethz.ch/tools/postgrey...pbp.net.html); from= to=<7> proto=ESMTP helo=
Nov 30 19:34:43 heap postfix/smtpd[27141]: NOQUEUE: reject: RCPT from unknown[201.240.117.167]: 450 4.7.1 <7>: Recipient address rejected: Greylisted for 18 seconds (see http://isg.ee.ethz.ch/tools/postgrey...pbp.net.html); from= to=<7> proto=ESMTP helo=
Nov 30 19:34:43 heap postfix/smtpd[27141]: NOQUEUE: reject: RCPT from unknown[201.240.117.167]: 450 4.7.1 <7>: Recipient address rejected: Greylisted for 18 seconds (see http://isg.ee.ethz.ch/tools/postgrey...pbp.net.html); from= to=<7> proto=ESMTP helo=

--
Postfix is greylisting things for addresses that do not exist on my system. This is the first box that I've used greylisting on. With the previous server, I had Postfix to use a relay_recipient_maps file and that file contained a list of valid email addresses. Anything else was rejected.

While postfix is still rejecting the addresses that are invalid, Postgrey is also getting involved. I'd like to have Postfix just reject the invalid addresses right off the bat before Postgrey gets involved.

In main.cf:
relay_recipient_maps = hash:/etc/postfix/valid_emails

smtpd_recipient_restrictions =
reject_unauth_pipelining,
permit_mynetworks,
permit_sasl_authenticated,
reject_non_fqdn_recipient,
reject_unauth_destination,
check_policy_service inet:127.0.0.1:60000,
check_recipient_access hash:/etc/postfix/recipient_checks,
check_sender_access hash:/etc/postfix/sender_access,
check_client_access hash:/etc/postfix/banned_servers,
permit

--

I really don't want to sign up for the Postfix-users mailing list just to ask one question, and I have already searched Google for this issue to no avail.

Anybody have Postfix-foo that can help me? I believe it might be a matter of re-ordering some of the content checks, but I'm not too sure.
__________________

Ask MetaFilter questions tagged with greylisting

Help me punt email before it wastes postgreys time.