Re: How to block certain tld's

4 msg	Client sporadically unknown
2 msg	disappearing admin mail
1 msg	Virtual mailing list from SQL query
13 msg	the most popular domainkey signer?
2 msg	Alias to nonexistent user
8 msg	Configuration... any issues or suggestions?
3 msg	Script to 'click' on a URL in an e-mail?
2 msg	Lots of Connection Refused messages
4 msg	Get rid of messages in Cyrillic?
6 msg	Disabling cleanup of messages?
4 msg	domain name not appending for internal messages
2 msg	OT: help with understanding domain key implicat...
7 msg	rejecting spam that doesn't include the recipie...
4 msg	Question: rejecting email normally, then callin...
3 msg	deny sender
7 msg	Postfix SMTP service unavailable
4 msg	controlling spamming using sender_access file
2 msg	address not listed for hostname
3 msg	Best method to handle invalid HELO hostnames?

How to block certain tld's
\ Jack Raats (16 Mar 2008)
. \ Justin Piszcz (16 Mar 2008)
. \ mouss (16 Mar 2008)

Subject:	Re: How to block certain tld's
Group:	Postfix-users
From:	mouss
Date:	16 Mar 2008

Jack Raats wrote:
> I want to block certain tld's and somehow it doesn't work.
>
> In main.cf I have
>
> smtpd_recipient_restrictions =
> ....
> permit_mynetworks,
> permit_sasl_authenticated,
> reject_unauth_destination,
> ....
> check_client_access hash:/postfix/tables/blacklist,
> ...
>
> In /postfix/tables/blacklist
> .biz REJECT
> .gov REJECT
> .pro REJECT
> .cn REJECT
>

http://www.postfix.org/postconf.5.html#parent_domain_matches_subdomains

> Still I receive a lot of chinese spam.
> Can anyone give me some clues?

you forgot the relevant logs.
>
> and how to do the opposite?
> To receive mail from only three tld's like .net, .com and .org?

smtpd_recipient_restrictions =
...
reject_unauth_destination
...
check_client_access pcre:/etc/postfix/tld_acl
check_helo_access pcre:/etc/postfix/tld_acl

== tld_acl
# whitelist
/\.(com|org|net|info)$/ DUNNO
...
# blacklist
/\.(arpa|lan|localdomain|localhost)$/ REJECT
#/\.(aero|museum)$/ REJECT
...

# whitelist"country" tld
/\.[^.]{2}$/ DUNNO
#others
/\./ reject_unknown_client,
reject_unknown_helo_hostname, greylist