[sdnog] block a blank FROM "from=<>" in mail system

[Manhal Mohammed]

I have this huge amount of emails coming from a blank email , I can't decide whether it's a spam or not so am trying to block any blank FROM email for testing.


Sent from BlueMail<http://www.bluemail.me/r?b=13187>
On 21 Jul 2018, at 14:55, Philip Paeps <philip at trouble.is<mailto:philip at trouble.is>> wrote:

On 2018-07-20 22:42:55 (+0530), Manhal Mohammed wrote:
 how can i block a blank "from" in mail system ; here is a line  "looks
 like" from maillog file  :

 mail postfix/smtpd[port]: NOQUEUE: filter: RCPT from some.domain
 [public IP]: <>: Sender address triggers FILTER smtp-amavis:[my local
 IP]:port; from=<> to=<usr at mydomain.bla> proto=ESMTP helo=<some.domain>

Blocking the unspecified sender will break email.  It's used for
non-delivery reports.

 although the match between FROM address and sasl username is
 configured but i still can see blank FROM :(

There is no evidence of authentication in the log you pasted.

 did i miss something ?

What is the problem you are actually trying to solve?

Philip
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sdnog.sd/pipermail/sdnog/attachments/20180723/b3d91c5e/attachment.html>