Subject: re: greylisting for postfix
To: Rick Kelly <rmk@toad.rmkhome.com>
From: Mr G.D. Tyson <Dave.Tyson@liverpool.ac.uk>
List: netbsd-users
Date: 11/01/2006 22:09:24
On 11/01/2006 14:32:23 Rick Kelly said:

> Is anyone doing greylisting with postfix? It looks like there is 
> nothing but the undocumented postgrey out there. I installed the 
> package and got /usr/pkg/sbin/postgrey and a message that says:
>
> ===========================================================================
> Installing files needed by postgrey-1.21:
>
>        /usr/pkg/etc/postfix/postgrey_whitelist_clients
> 
> [/usr/pkg/share/examples/postgrey/postgrey_whitelist_clients]
>
>        /usr/pkg/etc/postfix/postgrey_whitelist_recipients
> 
> [/usr/pkg/share/examples/postgrey/postgrey_whitelist_recipients]
>
> ===========================================================================
> ===========================================================================
> The following files should be created for postgrey-1.21:
>
>        /etc/rc.d/postgrey (m=0755)
>            [/usr/pkg/share/examples/rc.d/postgrey]
>
> ===========================================================================
>
> And that's it. No docs. No indication on how to configure it in 
> postfix.

Append the stuff below to the end of /etc/postfix/main.cf

#
# greylist + spam blocks

smtpd_recipient_restrictions =
     permit_mynetworks,
     reject_unauth_destination,
     reject_invalid_hostname,
     reject_unauth_pipelining,
     reject_non_fqdn_sender,
     reject_unknown_sender_domain,
     reject_non_fqdn_recipient,
     reject_unknown_recipient_domain,
     check_policy_service inet:127.0.0.1:2525
     permit

Then restart postfix.

Dave

--
=====================================================================
Programmer (Retired)              Email: dtyson@liv.ac.uk
Ex University of Liverpool        WWW: http://www.liv.ac.uk/~dtyson
=====================================================================