Différences

Ci-dessous, les différences entre deux révisions de la page.

--- tech:postfix_bloquer_un_domain_ou_une_ip [2025/11/12 11:18] – Jean-Baptiste
+++ tech:postfix_bloquer_un_domain_ou_une_ip [2026/06/07 19:12] (Version actuelle) – modification externe 127.0.0.1
@@ Ligne 1: / Ligne 1: @@
+<!DOCTYPE markdown>
+{{tag>Brouillon Postfix Email}}
+# Postfix Liste blanche et liste noire
+Librement traduit de http://www.linuxlasse.net/linux/howtos/Blacklist_and_Whitelist_with_Postfix
+Nous pouvons jouer sur deux paramètres :
+`check_client_access` \\
+Bloque par IP, plage d'IP ou nom DNS
+`check_sender_access` \\
+Bloque par adresse email (champ FROM)
+Il est important de définir `check_client_access` et `check_sender_access` en premier
+`/etc/postfix/main.cf`
+~~~
+smtpd_client_restrictions = permit_mynetworks, check_client_access hash:/etc/postfix/client_checks, check_sender_access hash:/etc/postfix/sender_checks
+~~~
+`/etc/postfix/client_checks`
+~~~
+# Restricts which clients this system accepts SMTP connections from.
+mondomain.com             REJECT Fraud rejected
+example.com               REJECT No spammers
+.example.com              REJECT No spammers, from your subdomain
+.456.789.123           REJECT Your IP is spammer
+.456.789.0/24          REJECT Your IP range is spammer
+.987.654.321           OK
+example1.com              OK
+~~~
+`/etc/postfix/sender_checks`
+~~~
+# Restricts sender addresses this system accepts in MAIL FROM commands.
+example.com              REJECT env. from addr any@example.com rejected
+.example.com             REJECT env. from addr any@sub.example.com rejected
+user@example.com         REJECT We don't want your email
+example2.com             OK
+~~~
+~~~bash
+postmap /etc/postfix/client_checks
+postmap /etc/postfix/sender_checks
+postfix reload
+~~~
+------------
+# Postfix bloquer un domain ou une IP
+Source : http://arnofear.free.fr/linux/template.php?tuto=22&page=1
+`/etc/postfix/main.cf`
+~~~ini
+# Permet de refuser la connexion SMTP pour les IP ou domaines contenus
+# dans ce fichier.
+smtpd_client_restrictions = check_client_access hash:/etc/postfix/blacklisted_sender
+~~~
+`/etc/postfix/blacklisted_sender`
+~~~
+# Domaine ou IP.
+rolexreplica.com REJECT You are blacklisted
+.123.456.78 REJECT You are blacklisted
+~~~
+~~~bash
+postmap /etc/postfix/blacklisted_sender
+service postfix reload
+~~~