Interesting bit of history: [WayBack] 4.2.2.2: The Story Behind a DNS Legend – tummy.com, ltd.
–jeroen
Archive for April 19th, 2019
Do not use, even if you are a Level 3 customer – 4.2.2.2: The Story Behind a DNS Legend – tummy.com, ltd.
Posted by jpluimers on 2019/04/19
Posted in Development, History, Internet, Power User | Leave a Comment »
“ESXi 6.5” “vSphere Web Client” “VMware Tools” – how to install/upgrade
Posted by jpluimers on 2019/04/19
This got me zero good hits in the top 10: “ESXi 6.5” “vSphere Web Client” “VMware Tools” – Google Search
Since how to install/upgrade moved, here is a screenshot how to install or upgrade the VMware Tools using the “new” vSphere Web Client that standard in ESXi 6.5 and up:
It would be much more intuitive if the blue bar just linked to that action.
–jeroen
Share this:
Posted in ESXi6.5, Power User, Virtualization, VMware, VMware ESXi | Leave a Comment »
Postfix and blacklists
Posted by jpluimers on 2019/04/19
Still learning postfix configuration, below are some links on how to enable various blacklists that use the RBL DNS (aka [WayBack] DNSBL) way of operations.
They are centered around using the of the [WayBack] Postfix Documentation entry reject_rbl_client listings:
- [WayBack] 5 main.cf – Postfix Configuration Parameters: reject_rbl_client
- [WayBack] Postfix SMTP relay and access control: Getting selective with SMTP access restriction lists
- [WayBack] Postfix manual – smtpd(8)
- [WayBack] 5 main.cf – Postfix Configuration Parameters: reject_rbl_client
- [WayBack] Postfix Stress-Dependent Configuration: Disconnect suspicious SMTP clients
- [WayBack] Postfix Per-Client/User/etc. Access Control
- [Archive.is] HISTORY
Basically reject_rbl_client is part of smtpd_client_restrictions.
TODO:
I need to dig further into some other blacklist options than
reject_rbl_client: reject_rhsbl_client, reject_rhsbl_reverse_client, reject_rhsbl_sender or reject_rhsbl_recipient restriction.Then I need to go through these links:
- [WayBack] Jim Seymour’s suggestions/examples for Postfix anti-UCE configuration. (Aka: Postfix Anti-UCE Cheat Sheet)
- [WayBack] Blocking SPAM (UCE) using Postfix
- [WayBack] Enable DNSBL service in Postfix to reduce spam
- [WayBack] spam – Blacklisted client: why did Postfix not reject this email? – Server Fault
- [WayBack] spam – Postfix reject_rbl_client Blacklists Not Working – Server Fault
- [WayBack] How To Block Spam Before It Enters A Postfix Server
- [WayBack] Postfix configure anti spam with blacklist – nixCraft
- [WayBack] HOWTO Stop spam using Postfix – LinuxReviews
- [WayBack] email server – How to enable RBL checking in postfix? – Server Fault
- [WayBack] More robust Postfix anti-spam configuration | Le Blog
- [WayBack] dnswl.org – E-Mail Reputation – Protect against false positives
- [WayBack] dnswl.org Self Service
Dnswl.org maintains a database of IP addresses (netranges) which are grouped into “DNSWL Records” (identified by a DNSWL Id, which is just an arbitrary number). This data is maintained through a combination of manual and automated actions – and by yourself.
Using the Self Service portal you can “claim” DNSWL Ids as being yours After verification you can then request changes to IPs already stored, or add new IPs. For most parts, there will still be an editor approval before changes take effect.
The Self Service portal is also used to manage the subscriptions which are required for certain types of users (eg for > 100’000 queries per day).
Some blacklist checking links:
- [WayBack] DNSBL Information – Spam Database and Blacklist Check
- [WayBack] IP Address Blacklist Check
- [WayBack] The Spamhaus Project – ZENzen.spamhaus.org should be the only spamhaus.org DNSBL in your IP blocklist configuration. You should not use ZEN together with other Spamhaus IP blocklists, or with blocklists already included in our zones (such as the CBL) or you will simply be wasting DNS queries and slowing your mail queue.
Caution: Because ZEN includes the XBL and PBL lists, do not use ZEN on smarthosts or SMTP AUTH outbound servers for your own customers (or you risk blocking your own customers). Do not use ZEN in filters that do any ‘deep parsing’ of Received headers, or for anything other than checking IP addresses that hand off to your mailservers.
–jeroen
Share this:
Posted in *nix, *nix-tools, postfix, Power User | Leave a Comment »
The Wiert Corner - irregular stream of stuff 