i use this option smtpd_recipient_restrictions = reject_invalid_hostname, reject_unknown_recipient_domain, reject_unauth_pipelining, permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination, reject_rbl_client dsn.rfc-ignorant.org, reject_rbl_client dul.dnsbl.sorbs.net, reject_rbl_client list.dsbl.org, reject_rbl_client sbl-xbl.spamhaus.org, reject_rbl_client bl.spamcop.net, reject_rbl_client cbl.abuseat.org, permit but if someone email from @geldermalsen.rabobank.nl then i get no mail what can i do this adres is not in the spam lists!
That's because this domain is not valid: Code: :~$ dig geldermalsen.rabobank.nl ; <<>> DiG 9.3.2 <<>> geldermalsen.rabobank.nl ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 18106 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;geldermalsen.rabobank.nl. IN A ;; AUTHORITY SECTION: rabobank.nl. 586 IN SOA NS.rabobank.nl. name-it.rf.rabobank.nl. 2001082639 3600 600 1209600 600 ;; Query time: 2 msec ;; SERVER: 172.16.3.70#53(172.16.3.70) ;; WHEN: Wed Jan 31 15:42:55 2007 ;; MSG SIZE rcvd: 92 See? No ANSWER section. One of you reject statements is triggered by this. Don't know for sure, but I'd suspect reject_unknown_recipient_domain, or dsn.rfc-ignorant.org. Or better, ask your contact at the bank to use a valid from/return address.
Fighting SPAM Personally, i do not have good experience with the blacklists as mentioned within /etc/postfix/main.cf. It causes to much problems for clients. Right now i am using Postgrey, an easy to install software package for the Postfix MTA. I have good experience with it and it works very well on an ISPConfig server. Here you can read how to setup Postgrey for Postfix: http://www.howtoforge.com/greylisting_postfix_postgrey
