Remedy after postfix becomes a spam transit station

Corporate email servers have recently been used as transit stations to forward a large number of advertising emails , Record the remedial process here .

• First clear the spam sending task in the queue ;

stop it sendmail service

#service sendmail stop

Clear outgoing task

#rm -rf /var/spool/mqueue/*

start-up sendmail service

#service sendmail start

• No forwarding , Enable blacklist

modify postfix Configuration file for main.cf

#vim /etc/postfix/main.cf

take myhostname Point to the domain name of the mail service

myhostname = mail.xiabian.com

mydomain The parameter points to the root domain

mydomain = xiabian.com

myorigin Point to mydomain

myorigin = $mydomain

mydestination Point to mydomain

mydestination = $mydomain

To monitor all IP

inet_interfaces = all

Set to trust only this machine

mynetworks_style = host

To configure mydomain To be able to be Postfix forward

relay_domains = $mydomain

Control the sending of mail

Mail from foreign domain to local domain , Receive all

Mail from local domain to foreign domain , Only local sending is allowed

Foreign domain to foreign domain mail , Reject send

Set sender rules , Allow local domain addresses , And refuse sender_access The sender contained in the file

Prevent other users from outside to [email protected] Send email as , However, logging in to this computer and sending it again will not be affected

Rule 1 permit_mynetworks Is to allow local login users to send mail

smtpd_sender_restrictions = permit_mynetworks, check_sender_access 
hash:/etc/postfix/sender_access, permit

/etc/postfix/sender_access The content of

xiabian.com REJECT

Set recipient rules , Allow local domain addresses , And allow recipient_access The recipient included in the document

smtpd_recipient_restrictions = permit_mynetworks, check_recipient_access 
hash:/etc/postfix/recipient_access, reject

/etc/postfix/recipient_access The content of

The foreign domain can only be sent to the following two Email Address , Any other address will be rejected , Send to this machine but not affected by this machine

[email protected] OK
[email protected] OK

use postmap Generate hash File format

#postmap sender_access 
#postmap recipient_access

start-up Postfix

#/etc/init.d/postfix start