<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p>I was hoping to avoid dropping messages on the floor for
well-behaved servers. While it's rare, I have found the
occasional ham that gets marked as spam. With D_REJECT, at least
the sender gets a notification that the message didn't go
through. In looking at the logs, I think the backscatter messages
are generated when the spammer disconnects the session immediately
after ending the DATA part of the SMTP session but before the
system responds with a reject code. A legitimate MTA should wait
for a reply. Ideally, I'd like to try to reject, and only drop if
the reject fails.<br>
</p>
<p>--Todd<br>
</p>
<br>
<div class="moz-cite-prefix">On 4/14/17 6:22 AM, Robert Moskowitz
wrote:<br>
</div>
<blockquote
cite="mid:46bce64a-07d5-bd87-9be3-91f99fdacce7@htt-consult.com"
type="cite"> <br>
<br>
On 04/14/2017 04:35 AM, Todd D. Taft wrote: <br>
<blockquote type="cite">I'm running amavisd-new on a CentOS 7
system with postfix as my MTA. <br>
<br>
I've got amavisd-new set up to run as a pre-queue test in the
postfix's master.cf: <br>
smtp inet n - n - - smtpd <br>
-o smtpd_sasl_auth_enable=yes <br>
-o receive_override_options=no_address_mappings <br>
-o content_filter=smtp-amavis:127.0.0.1:10024 <br>
-o smtpd_tls_security_level=may <br>
smtp-amavis unix - - y - 2 smtp <br>
-o smtp_data_done_timeout=1200 <br>
-o disable_dns_lookups=yes <br>
-o smtp_send_xforward_command=yes <br>
<br>
In my amavisd.conf, I've got it set to reject everything bad: <br>
$final_virus_destiny = D_REJECT; <br>
$final_banned_destiny = D_REJECT; <br>
$final_spam_destiny = D_REJECT; <br>
$final_bad_header_destiny = D_REJECT; <br>
<br>
However, I've noticed that somehow I'm still generating some
backscatter on this server. (mails from local MAILER-DAEMON
going out to alleged spam senders). <br>
<br>
Is there a way to stop this? <br>
<br>
</blockquote>
I use: <br>
<br>
$final_banned_destiny = D_DISCARD; <br>
<br>
<br>
<br>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Todd D. Taft
<a class="moz-txt-link-abbreviated" href="mailto:taft@unclet.net">taft@unclet.net</a></pre>
</body>
</html>