stopping Spam with postfix

4 msg	nested_header_checks
10 msg	Hotmail Problem
4 msg	feedback request: scheduled delivery of messages
1 msg	pkgsrc 'postfix-stress' option (Re: PATCH versi...
10 msg	How to enforce users send email with the real f...
15 msg	Catchall setup problem with Virtual domains and...
2 msg	question
5 msg	restrictions
5 msg	problems with virtual alias table
2 msg	some mails bounce with 'Name or service not known'
2 msg	External recipients within same domain
2 msg	~RE: stopping Spam with postfix

stopping Spam with postfix
\ James D. Parra (12 Jan 2008)
. \ James A. de Haseth (12 Jan 2008)
. \ (Wietse Venema) (12 Jan 2008)
. \ James D. Parra (12 Jan 2008)
. . \ mouss (12 Jan 2008)
. . . \ thomas polnik (12 Jan 2008)
. . . . \ mouss (12 Jan 2008)
. . . . . \ Guy Story (13 Jan 2008)
. . . . . . \ Jorey Bump (13 Jan 2008)

17 msg	Messages stuck in active queue
4 msg	virtual: Command as adress list
1 msg	variable quota policy ideas
2 msg	How to unistall postfix from compiling source(m...
1 msg	Backup mx with local delivery and forwarding fo...
4 msg	Receiving Mail with from mydomain.com from unkn...
10 msg	Which is the best soft for mailscanning?

Subject:	stopping Spam with postfix
Group:	Postfix-users
From:	James D. Parra
Date:	12 Jan 2008

Hello,

Its a continuous battle with spammers. Could someone help me fix or add a
little more protection to Postfix. I am pretty new to it, but I did add the
following to the main.cf;

transport_maps = hash:/etc/postfix/transport
smtpd_client_restrictions = permit_mynetworks, reject_rbl_client
dnsbl.sorbs.net, permit
smtpd_delay_reject = yes
smtpd_helo_required = yes
smtpd_helo_restrictions = reject_non_fqdn_hostname,
reject_invalid_hostname, permit
smtpd_sender_restrictions = reject_non_fqdn_sender,
reject_unknown_sender_domain, permit

We're getting hit from all over, random IP addresses from everywhere it
seems.

I've included some header info from the various spam messages that are
coming in.

Many thanks in advance.

~James

**Mail headers** View basic headers
Received: from [200.5.59.232] (unknown [200.5.59.232]) by
ourpostfixserver.ourdomainname.com (Postfix) with ESMTP id 2D560185F47 for
<amadoshepardroof>; Fri, 11 Jan 2008 09:40:20 -0800 (PST)
Received: from [200.5.59.232] by mail.pluscare.com; Fri, 10 Jan 2008
12:40:19 -0500
From: "Hilario Dickens" <anarchicl17>
To: <amadoshepardroof>
Subject: RooseveltMountainousCock
Date: Fri, 10 Jan 2008 12:40:19 -0500
Message-ID: <01c85385$f5397b80$e83b05c8@anarchicl17>
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-2"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook, Build 10.0.3416
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670
Importance: Normal

**Mail headers** View basic headers
Received: from [88.220.140.100] (unknown [88.220.140.100]) by
ourpostfixserver.ourdomainname.com (Postfix) with ESMTP id 2F0D8185F3D for
<xbgvr>; Fri, 11 Jan 2008 09:32:24 -0800 (PST)
Received: from bracia ([170.114.78.37] helo=bracia) by
[88.220.140.100] ( sendmail 8.13.3/8.13.1) with esmtpa id 1GJoeC-000EMC-Vx
for xbgvr; Fri, 11 Jan 2008 18:32:34 +0100
Message-ID: <000b01c85477$e7858db0$648cdc58@bracia>
From: "Dax Machalow" <Dax_Machalow>
To: xbgvr
Subject: gnorosok
Date: Fri, 11 Jan 2008 18:32:14 +0100
Message-ID: <000b01c85477$e7858db0$648cdc58@bracia>
MIME-Version: 1.0
Content-Type: text/plain; charset="windows-1250"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook, Build 10.0.6626
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2962

**Mail headers** View basic headers
Received: from vfppp079167026018.dsl.hol.gr
(vfppp079167026018.dsl.hol.gr [79.167.26.18]) by
ourpostfixserver.ourdomainname.com (Postfix) with ESMTP id 45B70185EFB for
<roycekauffmancongest>; Fri, 11 Jan 2008 09:33:31 -0800
(PST)
Received: from [79.167.26.18] by smtp.secureserver.net; Fri, 10 Jan
2008 19:33:30 +0200
From: "Donovan Salazar" <cellists1835>
To: <roycekauffmancongest>
Subject: PhallusOversizeFrankie
Date: Fri, 10 Jan 2008 19:33:30 +0200
Message-ID: <01c853bf$adcfe100$121aa74f@cellists1835>
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook, Build 10.0.2627
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527
Importance: Normal

**Mail headers** View basic headers
Received: from 18970237109.user.veloxzone.com.br (unknown
[189.70.66.226]) by ourpostfixserver.ourdomainname.com (Postfix) with ESMTP
id 4B1A9185F35 for <tysoncopedeclaratory>; Fri, 11 Jan
2008 09:31:53 -0800 (PST)
Received: from LENOVO-62206655 ([137.184.3.108] helo=LENOVO-62206655)
by 18970237109.user.veloxzone.com.br ( sendmail 8.13.3/8.13.1) with esmtpa
id 1KVsZP-000EXP-Tk for tysoncopedeclaratory; Fri, 11 Jan
2008 14:31:55 -0200
Message-ID: <46206071.748F45CF>
Date: Fri, 11 Jan 2008 14:31:43 -0200
From: "Garra Dinsmore" <Dinsmorepoyfy>
User-Agent: Thunderbird 2.0.0.0 (Windows/20070326)
MIME-Version: 1.0
To: tysoncopedeclaratory
Subject: ispukuja
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

**Mail headers** View basic headers
Received: from 18912231004.user.veloxzone.com.br (unknown
[189.13.174.104]) by ourpostfixserver.ourdomainname.com (Postfix) with ESMTP
id 2C271185EFB for <andrewholcombfastidious>; Fri, 11 Jan
2008 09:50:52 -0800 (PST)
Received: from next-level by thehearth.biz with ASMTP id 29FFA19E for
<andrewholcombfastidious>; Fri, 11 Jan 2008 15:51:06 -0200
Received: from next-level ([115.193.188.17]) by thehearth.biz with
ESMTP id 56534F75E739 for <andrewholcombfastidious>; Fri,
11 Jan 2008 15:51:06 -0200
Message-ID: <30FEF7EA.AFF473FA>
Date: Fri, 11 Jan 2008 15:50:49 -0200
From: "Jeova Eidem" <Jeova-Eidem>
User-Agent: Thunderbird 2.0.0.0 (Windows/20070326)
MIME-Version: 1.0
To: andrewholcombfastidious
Subject: gouzou
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

**Mail headers** View basic headers
Received: from ansys.com (unknown [59.15.244.17]) by
ourpostfixserver.ourdomainname.com (Postfix) with SMTP id 03411185F91 for
<papersnn>; Fri, 11 Jan 2008 15:07:34 -0800 (PST)
Received: from 66.135.195.180 (HELO data.ebay.com) by
ourdomainname.com with esmtp (RPQQXNWLK SULOW) id JcBzlH-hrCOi-5Q for
papersnn; Sat, 12 Jan 2008 08:07:41 -1500
Message-ID: <0c3801c854a6$c44c05c0$3b0ff411@Andres>
From: "Andres O. Parks" <Andres>
To: "Forrest W. Dawson" <papersnn>
Subject: Increase your pen!s safely and fast!
Date: Sat, 12 Jan 2008 08:07:41 -1500
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_3126_0CA0_01C854F2.3433ADC0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2670
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670

**Mail headers** View basic headers
Received: from dsbvi6044.domain.actdsltmp (71-219-2-158.slkc.qwest.net
[71.219.2.158]) by ourpostfixserver.ourdomainname.com (Postfix) with SMTP id
6B8A0185F0F; Fri, 11 Jan 2008 15:39:14 -0800 (PST)
Received: from localhost (localhost.localdomain [127.0.0.1]) by
host24127951.stevenblumenthal.com (8.13.1/8.13.1) with SMTP id
mUl9N8m083.756519.Hb5.vMC.9616329215044 for <gonzalocuny>;
Fri, 11 Jan 2008 16:38:57 +0700
Message-ID: <1b1101c854ab$2f9f02b0$0200a8c0@DSBVI6044>
From: "Danielle Cramer" <DarlenewillardButts>
To: <gonzalocuny>, <isabelblouse,
<jdfn, <greenwoodderek,
<gouldcyclotomic
Subject: Your order
Date: Fri, 11 Jan 2008 16:38:57 +0700
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_1B0D_01C854AB.2F9F02B0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1437
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441