Re: how to block connections at TCP level?

Zitat von Igor Lidin <x-list@il.pp.ru>:

> Hi all!
>=20
> Is there any possibility to block incoming SMTP connections to port 25
> controlled by postfix at TCP level (e.g. refuse connection or at least
> disconnect immediately) using filtering rules already supported by post=
fix -
> cidr maps, tcp maps, dnsbl checks and so on?
>=20
> It is needed because of huge traffic amount that eated by useless spam
> connections (e.g. from *.ipt.aol.com) that are filtered anyway at "clie=
nt"=20
> stage.
>=20
> It may be implemented as something like smtpd_tcp_restrictions configur=
ation
> variable.

Postfix is a MTA not a firewall. Use iptables (or whatever your OS suppor=
t) to
do this.

Regards

Andreas