• Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar

Jaranguda

Belajar Mengajar

  • Home
  • Sponsor/Jasa
  • Tentang

spoofed

Block Email Spoofing di Postfix

Last Updated on 24 March 2016 By tommy Leave a Comment

Sering menerima email dari anda sendiri? Yang isinya file attachment bervirus atau mama minta pulsa :P. Kalo anda menggunakan GMAIL, Yahoo atau Hotmail mereka sudah bisa memfilter email seperti ini. Nah, ini buat yang mengelola sendiri mail server nya, terkhusus yang menggunakan postfix.

Buat daftar domain di /etc/postfix/domain_list

jaranguda.com REJECT Blacklisted

bila anda memiliki lebih 1 satu domain, buat daftarnya 1 baris satu domain. Kata Blacklisted disitu adalah pesan errornya.

edit file /etc/postfix/main.cf edit bagian smtpd_recipient_restrictions, kira-kira menjadi

smtpd_recipient_restrictions =
        permit_sasl_authenticated,
        permit_mynetworks,
        reject_non_fqdn_sender,
        reject_non_fqdn_recipient,
        reject_unauth_pipelining,
        reject_unauth_destination,
        reject_unauth_pipelining,
        reject_unknown_sender_domain,
        reject_unknown_address,
        reject_unknown_recipient_domain,
        check_sender_access hash:/etc/postfix/access_sender

check_sender_access buat di bagian paling bawa rulenya.

restart postfix

service postfix restart

contoh log yang ngirim email spoof

Resolving hostname...
Connecting...
SMTP -> FROM SERVER:
220 tuba.jaranguda.com ESMTP Postfix
SMTP -> FROM SERVER: 
250-tuba.jaranguda.com
250-PIPELINING
250-SIZE 130720000
250-ETRN
250-STARTTLS
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
MAIL FROM: mamamintapulsa@jaranguda.com
SMTP -> FROM SERVER:
250 2.1.0 Ok
RCPT TO: mamamintapulsa@jaranguda.com
SMTP -> FROM SERVER:
554 5.7.1 : Sender address rejected: Blacklisted
SMTP -> ERROR: RCPT not accepted from server: 554 5.7.1 : Sender address rejected: Blacklisted
 
Message sending failed.

Di log mail server muncul error seperti ini

Mar 24 15:39:53 mail postfix/smtpd[4673]: NOQUEUE: reject: RCPT from xxxxx.com[xxx.xxx.23]: 554 5.7.1 <mamamintapulsa@jaranguda.com>: Sender address rejected: Blacklisted; from=<mamamintapulsa@jaranguda.com> to=<mamamintapulsa@jaranguda.com> proto=ESMTP helo=<xxxx.com>

berarti rule yang kita buat berhasil memblokir domain/email spoof dari domain milik kita.

Filed Under: Linux Tagged With: mail server, spoofed

Primary Sidebar

Pencarian

Tanya Jawab tentang DevOps SRE CPE, gabung di https://t.me/devopsindonesia

Terbaru

  • Cara Buat atau Update UID User Docker Image
  • Solusi helm Upgrade Failed
  • macOS package is untrusted
  • Cara Mengganti Port Screen Sharing macOS
  • Cara Menonaktifkan Pager di macOS

Komentar

  • Iqu on Review ISP Fiber Optik Balifiber
  • Sarah on Kemana Menghilangnya Saldo BCA 50 ribu
  • Rizcky on Kemana Menghilangnya Saldo BCA 50 ribu
  • Mubashar sadiq on Password Superadmin Huawei HG8245A
  • Beritalogi on Cara Redirect Domain di Cloudflare

Tulisan Populer

  • Password Router Huawei HG8245H5 Indihome 1.3m views
  • Password Terbaru ZTE F609 Indihome 786k views
  • Password Superadmin Huawei HG8245A 330.5k views
  • Cara Setting Manual Modem GPON ZTE F609 Indihome 275.4k views
  • Cara Setting Wireless ZTE F609 Indihome 260.4k views
  • Mengaktifkan Port LAN di Huawei HG8245 Indihome 172.2k views
  • Kemana Menghilangnya Saldo BCA 50 ribu 162k views
  • Akses UseeTV Indihome via Wireless ZTE F609 157.5k views
  • Cara Reset Password ZTE F609 Indihome 148.5k views
  • Cara Setting DHCP Server Modem/Router ZTE F609 115.5k views

Kategori

  • Delphi
  • dll
  • Gambas
  • Internet
  • Java
  • Lazarus
  • Linux
  • PHP
  • Review
  • Teknologi

Sponsor

kadal.id
carakami.com
kuotabisa.com
Untuk jadi sponsor, hubungi kita lewat halaman sponsor
© 2021. Jaranguda
  • Linux
  • PHP
  • Internet
  • Teknologi
  • Delphi
  • Gambas
  • Java