OPNsense Forum

English Forums => General Discussion => Topic started by: cabacognan on June 18, 2020, 01:04:21 pm

Title: SPAM from .ICU and .XYZ
Post by: cabacognan on June 18, 2020, 01:04:21 pm

We receive a high quantity of spam from these domains .ICU,.XYZ.  We use postfix to filter the mail and send to our exchange server.  It would be nice if I could use a wild-card @*.icu to block but this does not seem to work, the nearest is maybe @company.icu but this is useless as so many domains being used.  They are also not being flagged as SPAM.

tambac@monkeysunday.icu
shout@beginsense.icu
riel@factorbelief.icu
shout@decayadd.icu
endorse@likelyscream.icu

Title: Re: SPAM from .ICU and .XYZ
Post by: fabian on June 18, 2020, 04:51:32 pm

flagging as spam can be done via rspamd. It is not done by postfix.

Postfix (I don't know if the plugin has an UI for that), can do that via a sender map.

Title: Re: SPAM from .ICU and .XYZ
Post by: cabacognan on June 19, 2020, 02:08:04 am

The rspamd is enable, but I see no where on any of the Tabs where I can block a list of senders.  The only place I can see is in the Services: Postfix: Senders, where you can add a list of senders to Reject.  However, wildcards do not seem to work at this level i.e. @*.icu. -> REJECT

Title: Re: SPAM from .ICU and .XYZ
Post by: cabacognan on July 03, 2020, 10:25:18 am

Hi, I was hoping I could get some further help on this.

Title: Re: SPAM from .ICU and .XYZ
Post by: mimugmail on July 03, 2020, 11:44:24 am

I think you can edit the config files of rspamd by hand to include this stuff.
Currently lack of time to add this to the UI.

Perhaps admin UI also allows blacklisting via file input (if file permissions are correct)