From: Ralf Jung <post@ralfj.de>
Date: Sun, 4 Sep 2022 12:23:41 +0000 (+0200)
Subject: block a bounce spammer
X-Git-Url: https://git.ralfj.de/ansible.git/commitdiff_plain/69e35ceb2d9e8d52eeb7d6fbe10b856c4f51315c?ds=inline

block a bounce spammer
---

diff --git a/roles/email/templates/main.cf b/roles/email/templates/main.cf
index f7564df..1190de5 100644
--- a/roles/email/templates/main.cf
+++ b/roles/email/templates/main.cf
@@ -49,6 +49,7 @@ postscreen_non_smtp_command_enable = yes
 postscreen_bare_newline_enable = yes
 postscreen_access_list = permit_mynetworks,
 	cidr:$config_directory/postscreen_access.cidr
+postscreen_blacklist_action = enforce
 {% endif %}
 
 # control relay access
diff --git a/roles/email/templates/postscreen_access.cidr b/roles/email/templates/postscreen_access.cidr
index aec39ef..defe200 100644
--- a/roles/email/templates/postscreen_access.cidr
+++ b/roles/email/templates/postscreen_access.cidr
@@ -5,3 +5,6 @@
 40.104.0.0/15 permit
 52.96.0.0/14 permit
 2603:1000::/24 permit
+
+# Some hosts that send bounces to the wrong guy (i.e., me)
+153.122.0.0/15 reject please check your config, you are sending bounce spam