Борьба со спамом на почтовых серверах

# host -t PTR 84.9.30.216
216.30.9.84.IN-ADDR.ARPA domain name pointer example.com

# host -t A example.com
example.com has address 192.0.34.166

LOCAL_RULESETS

SLocal_check_relay

R$*			$: < $&{client_resolve} >
R<TEMP>			$#error $@ 4.7.1 $: "450 Relaying temporarily denied. IP name lookup failed for " $&{client_addr}
R<FAIL>			$#error $@ 5.7.1 $: "550 Relaying denied. IP name lookup failed for " $&{client_addr}
R<FORGED>		$#error $@ 5.7.1 $: "550 Relaying denied. IP name forged (PTR and A records mismatch) for " $&{client_addr}

LOCAL_CONFIG

Knondsl1		regex -a@MATCH (^|[0-9.-])(mail|mailrelay|mta|mx|relay|smtp)[0-9.-]
Knondsl2		regex -a@MATCH \.(hotmail\.com|rax\.ru|ip\.net\.ua)$

Kdsl1			regex -a@MATCH ([0-9].*){5,}
Kdsl2			regex -a@MATCH (^|[0-9.-])([axv]dsl|as|bgp|broadband|cable|[ck]lient|dhcp|dial|dialin|dialup|dialer|dip|dsl|dslam|dup|dyn|dynamic|host|ip|isdn|modem|nas|node|pool|ppp|pppo[ae]|sirius.*ukrtel.*|user|users|vpn)[0-9.-]
Kdsl3			regex -a@MATCH [0-9a-f]{8,}
Kdsl4			regex -a@MATCH (^|\.)[0-9]*[.-]
Kdsl5			regex -a@MATCH (-.*){3,}
Kdsl6			regex -a@MATCH \.(ipt\.aol\.com|internetdsl\.tpnet\.pl|rr\.com|pppool\.de|adelphia\.net|osnanet\.de|dedicado\.com\.uy)$


LOCAL_RULESETS

SLocal_check_relay

R$*			$: < $&{client_resolve} >
R<TEMP>			$#error $@ 4.7.1 $: "450 Relaying temporarily denied. IP name lookup failed for " $&{client_addr}
R<FAIL>			$#error $@ 5.7.1 $: "550 Relaying denied. IP name lookup failed for " $&{client_addr}
R<FORGED>		$#error $@ 5.7.1 $: "550 Relaying denied. IP name forged (PTR and A records mismatch) for " $&{client_addr}

R$*			$: $(nondsl1 $&{client_name} $)
R@MATCH			$@ OK
R$*			$: $(nondsl2 $&{client_name} $)
R@MATCH			$@ OK

R$*			$: $(dsl1 $&{client_name} $)
R@MATCH			$#error $@ 5.7.1 $: "554 DSL or DialUp sender " $&{client_name} " [" $&{client_addr} "] (1), please use Provider SMTP"
R$*			$: $(dsl2 $&{client_name} $)
R@MATCH			$#error $@ 5.7.1 $: "554 DSL or DialUp sender " $&{client_name} " [" $&{client_addr} "] (2), please use Provider SMTP"
R$*			$: $(dsl3 $&{client_name} $)
R@MATCH			$#error $@ 5.7.1 $: "554 DSL or DialUp sender " $&{client_name} " [" $&{client_addr} "] (3), please use Provider SMTP"
R$*			$: $(dsl4 $&{client_name} $)
R@MATCH			$#error $@ 5.7.1 $: "554 DSL or DialUp sender " $&{client_name} " [" $&{client_addr} "] (4), please use Provider SMTP"
R$*			$: $(dsl5 $&{client_name} $)
R@MATCH			$#error $@ 5.7.1 $: "554 DSL or DialUp sender " $&{client_name} " [" $&{client_addr} "] (5), please use Provider SMTP"
R$*			$: $(dsl6 $&{client_name} $)
R@MATCH			$#error $@ 5.7.1 $: "554 DSL or DialUp sender " $&{client_name} " [" $&{client_addr} "] (6), please use Provider SMTP"

FEATURE(`dnsbl', `list.dsbl.org', `"Yours IP " $&{client_addr} " are BlackListed by http://dsbl.org"')dnl
FEATURE(`dnsbl', `bl.spamcop.net', `"Spam blocked see: http://spamcop.net/bl.shtml?"$&{client_addr}')dnl
FEATURE(`dnsbl', `dul.ru', `"Yours IP " $&{client_addr} " are BlackListed by http://www.dul.ru"')dnl

acl local-host {
    127.0.0.0/8;
};

zone "dul.ru" {
	type slave;
	file "m/slaves/dul.ru";
	masters {
	    194.87.0.31;
	};
	allow-query {
	    local-host;
	};
	allow-transfer {
	    local-host;
	};
};

fred@example.com	example-fred
bob@example.com		example-bob
postmaster@example.com	example-postmaster
@example.com		error:5.1.1:550 User unknown

# host -t MX yandex.ru
yandex.ru mail is handled (pri=0) by mx1.yandex.ru
yandex.ru mail is handled (pri=10) by mx2.yandex.ru
yandex.ru mail is handled (pri=20) by mx3.yandex.ru

# telnet mx1.yandex.ru 25
Trying 213.180.200.7...
Connected to mx1.yandex.ru.
Escape character is '^]'.
220 Yandex ESMTP (NO UCE)(NO UBE) server ready at Fri, 10 Sep 2004 04:27:06 +0400
HELO people.dn.ua
250 mx7.yandex.ru Hello people.dn.ua
MAIL FROM:<>
250 2.1.0 Sender syntax Ok;
RCPT TO:<gfjsghfdh@yandex.ru>
550 5.1.1 <gfjsghfdh@yandex.ru> user unknown
QUIT
221 2.0.0 mx7.yandex.ru Out
Connection closed by foreign host.

Milter: from=<sashka@yahoo.com>, reject=421 4.7.1 MX 1 'mx1.mail.yahoo.com.' [64.157.4.78] for <sashka@yahoo.com> rejected address saying "VS14-RT5 Mailbox bounce arrival rate exceeds system limit (#4.2.2)"

reject "MAIL FROM: <> disabled for this recipient"
envfrom /<>/ei and envrcpt /<fred@example.com>/ei

UserName                = nobody
PolicyUrl               = http://www.somedomain.com/policy.html
Dbpath                  = /var/db/spamilter
Conn                    = local:/var/run/spamilter/spamilter.sock
DnsBlChk                = 0
SmtpSndrChk             = 1
SmtpSndrChkAction       = Reject        # valid options are 'Tag' or 'Reject'
MtaHostChk              = 0
MtaHostIpfw             = 0
MtaHostIpfwNominate     = 0
MtaHostIpChk            = 0
MtaSpfChk               = 0
MsExtChk                = 0
MsExtChkAction          = Reject        # valid options are 'Tag' or 'Reject'
PopAuthChk              = 0
MtaSpfChk               = 0