Home / server / Questions / 444151
In Process
Abraham Vegh
Asked: 2012-11-01 10:13:42 +0800 CST

How can I prevent Postfix from accepting mail from domains it owns, that it didn’t send?

  • 772

I have Postfix configured with a few domains, delivering to Dovecot locally.

I’ve noticed some interesting spam that comes in, purporting to be from an address at one of those domains, but that address does not exist.

How can I configure Postfix to drop those emails? Real email from this domain a. originates from the same server it is being delivered to, and b. is DKIM signed.

postfix

1 Answers

  1. You can prevent people using your own domains in MAIL FROM commands by putting them in a check_sender_access map after you accept mail from mynetworks and submission (SASL):

    smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, check_sender_access hash:/etc/postfix/my_domains, reject_unauth_destination

    And in /etc/postfix/my_domains:

    example.com REJECT
example.net REJECT you're not me!
example.org REJECT go away!

    As you see, you can provide custom errors too.

    • 3