HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials

HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials (http://www.howtoforge.com/forums/index.php)
-   Installation/Configuration (http://www.howtoforge.com/forums/forumdisplay.php?f=27)
-   -   Spam Protection - Beginners Guide? (http://www.howtoforge.com/forums/showthread.php?t=59999)

medienlounge 19th December 2012 16:29

Spam Protection - Beginners Guide?
 
Hi all,
first thanks for the great Perfect Server Ispconfig 3 debian lenny tutorial.

Everything is fine and running.

The only question for me right now is - my old server was managed and so i had nothing to do. the new one with that tutorial runs even better.
But what is i little strange for me is the fact, that so many spam mails are tried to be send over the server.

a few lines from mail.log:

Quote:

Dec 19 16:00:04 saturn postfix/smtpd[16593]: warning: 62.168.172.51: hostname host-62-168-172-51.customer.co.ge verification failed: Name or service not known
Dec 19 16:02:03 saturn postfix/smtpd[19675]: warning: 89.215.162.20: address not listed for hostname unknown.interbgc.com
Dec 19 16:02:47 saturn postfix/smtpd[16593]: warning: 202.108.3.242: hostname mail3-242.sinamail.sina.com.cn verification failed: Name or service not known
Dec 19 16:02:53 saturn postfix/smtpd[19675]: warning: 202.108.3.242: hostname mail3-242.sinamail.sina.com.cn verification failed: Name or service not known
Dec 19 16:03:17 saturn postfix/smtpd[19675]: warning: 220.181.12.63: hostname mx.mail.163.split.netease.com verification failed: Name or service not known
Dec 19 16:03:44 saturn postfix/smtpd[29844]: warning: 220.181.12.63: hostname mx.mail.163.split.netease.com verification failed: Name or service not known
Dec 19 16:07:11 saturn postfix/smtpd[16593]: warning: 202.108.3.242: hostname mail3-242.sinamail.sina.com.cn verification failed: Name or service not known
Dec 19 16:08:21 saturn postfix/smtpd[30192]: warning: 202.108.3.242: hostname mail3-242.sinamail.sina.com.cn verification failed: Name or service not known
Dec 19 16:09:32 saturn postfix/smtpd[16593]: warning: 189.120.10.31: hostname bd780a1f.virtua.com.br verification failed: Name or service not known
Dec 19 16:09:38 saturn postfix/smtpd[30231]: warning: 202.108.3.242: hostname mail3-242.sinamail.sina.com.cn verification failed: Name or service not known
Dec 19 16:11:55 saturn postfix/smtpd[30231]: warning: 216.252.79.201: hostname 201-79-252-216-dsl.colba.net verification failed: Name or service not known
Dec 19 16:13:17 saturn postfix/smtpd[30192]: warning: 202.108.3.242: hostname mail3-242.sinamail.sina.com.cn verification failed: Name or service not known
Dec 19 16:15:15 saturn postfix/smtpd[30231]: warning: 182.48.201.65: hostname 182.48.201.65.dvois.com verification failed: Name or service not known
Dec 19 16:19:21 saturn postfix/smtpd[31382]: warning: 202.108.3.242: hostname mail3-242.sinamail.sina.com.cn verification failed: Name or service not known
Dec 19 16:20:17 saturn postfix/smtpd[30192]: warning: 220.181.12.63: hostname mx.mail.163.split.netease.com verification failed: Name or service not known
Dec 19 16:20:51 saturn postfix/smtpd[31382]: warning: 202.108.3.242: hostname mail3-242.sinamail.sina.com.cn verification failed: Name or service not known
so the question for me is:
is there a way to check before agains blacklists and block that mails before?

if itīs already integrated in ispconfig - what is an "best practice configuration".

i had a look at this tread:
http://www.howtoforge.com/forums/sho...ht=debian+spam

but it would be nice to get a little feedback, perhaps more people have problems with that topic and it could be helpful for more people?

if there is and how-to which i didnīt find, please post links.

thanks all

Ghostdare 19th December 2012 18:12

Maybe this will help you

http://www.howtoforge.com/hardening-...or-ispconfig-3

medienlounge 20th December 2012 12:28

thanks for that reply.

the link looks good.
do i understand it right that all customers on the server need in there dns record that SPF record?

for example my server is
domain.tld

customers

customer.tld, customer2.tld

i have to add this record to all dns records?

does anyone know if hetzner robot system supports SPF?

thanks

(i hoped this would get a vivid thread with user users with the same problems - seems like iīm the only :confused: )

falko 20th December 2012 12:57

Quote:

Originally Posted by medienlounge (Post 289883)
i have to add this record to all dns records?

You don't have to, but I recommend it.


All times are GMT +2. The time now is 06:15.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.