Postfix - where to setup the you are not me option?

dimsion

Hey Everyone,

I'm trying to stop e-mail spoofing our domain by using "you are not me" method following the instruction from the link below but with pfsense file structure. Everything works great until i do anything via the web gui and after a saved, the setting inside main.cf remove check_helo_access hash:/usr/local/etc/postfix/helo.access . Now every morning I'm getting an e-mail message from me sending to me, telling me about a job offer to work from home >:(.

reference from: http://www.bowe.id.au/michael/isp/postfix-server.htm

vi /usr/local/etc/postfix/helo.access

## Deny connections from people forging our hostnames
mail.yourdomain.com REJECT You are not me
mail-mx.yourdomain.com REJECT You are not me

mail.domain1.com REJECT You are not me
mail.domain2.com REJECT You are not me
mail.domain3.com REJECT You are not me

postmap /usr/local/etc/postfix/helo.access

vi /usr/local/etc/postfix/main.cf
smtpd_helo_required = yes
smtpd_helo_restrictions =
permit_mynetworks,
check_helo_access hash:/usr/local/etc/postfix/helo.access,
# warn_if_reject,
reject_invalid_helo_hostname,
permit

postfix reload

marcelloc

All config is created by package gui. If you need to include a file hack, do it on postfix.inc

Are you using latest version? did you configured helo acl?

dimsion

Thanks for responding,

I using 2.0.2-RELEASE, if it does make a different i can definitely update to the latest version.
I did enable the Antispam -> Helo Hostname -> checked, but people in my office saying they're not getting e-mail from legitimate sender. I assume this must have block some host using outside e-mail server that doesn't match their dns record. Where is the helo acl area? is this part of the new release?

Thanks again,

marcelloc

@dimsion:

Where is the helo acl area? is this part of the new release?

Yes. :)

dimsion

Using the following version:
2.0.3-RELEASE (amd64)
built on Fri Apr 12 10:27:15 EDT 2013
FreeBSD 8.1-RELEASE-p13

I can't seem to get this working, i added my domain under services->postfix forwarder->access lists->helo

/^mydomain.org/ REJECT

Still, i'm getting e-mail send to me by me from an outsider source.

Perhaps, i'm placing it in the wrong place? Any help would greatly appreciated.

marcelloc

Many spams send a correct header but on mail change sender info on mail data.

on my setup I do not use the ^ on helo info

my domain restrictions are placed on acls helo and sender field