Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Is there a reliable way to reject incoming mails with a spoofed e-mail address?

What kind of checks does postfix run normally on incoming mails?

  • does postfix check the reverse dns by default?
  • does postfix have any other checks built-in and activated by default?
  • what kind of filters / milters are useful to prevent accepting spoofed mails?

Thank you for your help.

share|improve this question
1  
Take a look at Postfix's configuration variable smtpd_recipient_restrictions. –  André Daniel Aug 21 at 14:50

1 Answer 1

up vote 9 down vote accepted

Is there a reliable way to reject incoming mails with a spoofed e-mail address?

Over the years, there are some techniques implemented to identify spoofed email address, for example: SPF, Sender ID, DKIM, and DMARC. Take a look on these two excellent answers about email spoofing on security.stackexchange, here and here.

What kind of checks does postfix run normally on incoming mails?

To find out what default config shipped with postfix, please run postconf -d. And then take a look on smtpd_*_restriction. As default, postfix just run two checks,

permit_mynetworks, reject_unauth_destination

Parameter permit_mynetworks is permit email from your network. Parameter reject_unauth_destination is basic setting to make sure that your server doesn't became open relay, visit this page for brief explanation.

does postfix check the reverse dns by default?

Yes, but postfix only gave warning when reverse dns check fail. Here the sample warning from maillog.

Aug 22 10:37:17 mx postfix/smtpd[54487]: warning: hostname st.example.com does not resolve to address 192.168.231.235

does postfix have any other checks built-in and activated by default?

Check this page, and look for entry smtpd_*_restriction (e.g smtpd_client_restriction, smtpd_helo_restriction and so on). There are many check on postfix but as I said above, by default only two checks enabled.

what kind of filters / milters are useful to prevent accepting spoofed mails?

There are some milter/third apps to provide assists postfix battle spoofed email by applying four techniques I said above. For example tumgreyspf, opendkim, opendmarc and many others.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.