Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I woke up this morning to find my server's IP blacklisted by Gmail and Hotmail and 2,500+ 419 scam mails in my queue.

Server is Centos 6 running Plesk 10.4.4. I've googled for guides on securing Postfix but everything I can find involves hard-coding domains in config files. Can anyone recommend a secure configuration that will apply to any domains created through Plesk?

share|improve this question
    
I'd be quite surprised if Plesk shipped an open mail relay right out of the box. Perhaps you could supply some additional information as to what mail-related settings you changed during the install. You DID keep documentation on that, right? –  Magellan Jun 9 '12 at 14:57
    
I've verified that it's not an open relay, and digging through the headers reveals: Received: by <my machine's hostname> (Postfix, from userid 48) Which indicates to me that something running under mod_php is the culprit. The mails are all from mail@morrislawfirm.co.cc, which is (obviously) nothing to do with me. Is there any way of making rejecting mail not from a domain on its own box? –  Chris Cox Jun 9 '12 at 16:40
    
*making it reject mail, damn editing limit –  Chris Cox Jun 9 '12 at 16:49
    
Postfix in Plesk 10.4 comes with Milter (en.wikipedia.org/wiki/Milter) which can be used for coding own filters. Alternatively you may consider this solution when available - commtouch.com/press-releases/… –  Sergey L Jun 14 '12 at 10:32
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.