Zimbra uye server yakawandisa kudzivirira

Email yakazvisimbisa pachayo seyero yekutaurirana kwebhizinesi. Nekuda kwekudhura kwakanyanya kwemaemail, pamwe nehuwandu hwezvinhu zvine chekuita nekutora zvinyorwa uye kubatanidza zvakanamirwa, maemail ndiwo akanyatsokodzera basa renzira yepasirese yekutsinhana magwaro uye zvine hunyoro bhizinesi kutaurirana. Aya maficha akafanana ndicho chikonzero nei spammers vachida email zvakanyanya. Somugumisiro, e-mail yemazuva ano igungwa guru rinoputika re spam, mumvura iyo inongowanikwa chete tsamba dzebhizimisi dzinowanikwa. Ndokusaka rimwe remabasa ekutanga emutarisiri wechero mail server kuchengetedzwa kubva kune spam mailings. Ngatitarisei zvaunogona kuita neizvi muZimbra Collaboration Suite Open-Source Edition.

Zimbra uye server yakawandisa kudzivirira

Zvisinei nemhinduro yemahara, Zimbra OSE inokwanisa kupa maneja wesystem akawanda ekushandisa zvakanyanya kugadzirisa dambudziko rekugamuchira maemail asingadiwe. Isu takatonyora nezvezvishandiso zvakadai seAmavis, SpamAssassin, ClamAV uye cbpolicyd, izvo zvinokutendera kuti uchengetedze nekuvimbika tsamba dzinopinda, kusefa mameseji espam, pamwe neane utachiona uye phishing tsamba. Nekudaro, chakashata chavo chikuru ndechekuti vese vanoshanda nemameseji eemail atogashira uye vanoshandisa system zviwanikwa kusefa mameseji asina basa, ayo anogona kugara achishandiswa zviri nani. Asi ko kana bhizinesi rako rikazviwana rave mumharadzano yebhotnet hombe iyo inogara ichibhowa sevha yako yetsamba neakawanda maemail asina kujairika zvekuti kuasefa ega kunopedza chikamu cheshumba cheMTA's server?

Mune dzidziso, iwe unogona kuzvidzivirira kubva kune izvi nekubatanidza kune gore sevhisi kusefa tsamba inouya, asi mukuita iyi nzira yekudzivirira haina kukodzera kune ese bhizinesi, nekuti mune iyi kesi uchafanirwa kuvimba nevechitatu mapato kugadzirisa kwete chete spam. , asiwo tsamba dzebhizimisi, iyo isiri iyo nguva dzose yakachengeteka, uye kazhinji inopesana zvakananga nekambani yekuchengetedza mutemo. Mukuwedzera, kune njodzi dzinobatanidzwa nekuvimbika kwe cloud spam filter. Nzira yekubuda mumamiriro ezvinhu aya inogona kunge iri yekuronga kuchengetedza server uri wega. Kunyanya nekuda kwezvinangwa izvi, Zimbra ine yakavakwa muPostscreen utility, iyo yakagadzirirwa kuchengetedza mail server kubva kune tsamba dzakatumirwa nebhotnets, pasina kurodha mail server.

Chinonyanya kukosha chePostscreen ndechekuti chishandiso ichi chinotarisa zvikumbiro zvese zvekubatanidza tsamba sevha uye inodzivirira vatengi vayo vanofungidzira kuti havakwanise kubatana neseva. Sezvo nhamba dzichiratidza kuti inenge 90% yespam pasi rose inotumirwa nebotnets, Postscreen inowanzo shandiswa senzira yekutanga yekudzivirira maseva etsamba kubva kumaemail asingadiwe. Izvi zvinobvumira server yetsamba kushanda zvakavimbika pasina kuwandisa, kunyangwe panguva yekurwiswa kwakanyanya kwespam kubva kumabotnets makuru.

Nheyo yekushanda kwePostscreen iri nyore; iyo yekushandisa inokwanisa kuitisa akati wandei macheki emavara anouya isati yaaendesa kune mail server kana mamwe masevhisi anoitisa yakadzama uye yakadzama cheki yemavara anouya. Imwe neimwe yecheki, zvinoenderana, inogona kana kusapfuudzwa. Zvichienderana nemhedzisiro yecheki yega yega, Postscreen inogona kutora chimwe chezvitatu pakufunga kwemuZimbra maneja: Donhedza, Rega kana Simbisa. Chiito Donhedza zvinomisa zvine simba kubatana nemutengi kana cheki ikatadza, chiito Rega inokubvumira kufuratira mhedzisiro yecheki paunenge uchiita sarudzo yekupedzisira, asi panguva imwechete unganidza ruzivo uye manhamba nezve cheki, uye chiitiko. Simbisa inokubvumira kuti ufunge nezvemigumisiro yezviedzo zvakaitwa paunenge uchiita chisarudzo chekupedzisira, asi panguva imwechete ramba uchiita zviedzo zvose zvakarongwa nemutungamiri wehurongwa.

A nyore kushanda musimboti hazvirevi nyore kushandisa uye kugadzirisa. Icho chokwadi ndechekuti iyo Postscreen yakarongedzerwa zvisizvo inogona kuve chikonzero nei akati wandei mavara akakoshera bhizinesi asingasviki kune addressee. Ndosaka zvichidikanwa kuswedera kumisikidza chishandiso chine simba sePostscreen nekungwarira uye kugara uchichiyedza maitiro mune mamwe mamiriro.

Postscreen muZimbra inosanganisirwa pakutanga, asi vazhinji vanogona kusagutsikana nekutanga kumisikidzwa. Iye zvino tichatarisa yakanakisa sarudzo yekumisikidza Postscreen maererano nekuchengetedza uye kushaikwa kwenjodzi. Chinhu chayo chiri muchokwadi chekuti mushure mekutadza kwechero cheki, Postscreen haizoputsi chinyararire kubatana nemutengi, asi ichaita zvese cheki kusvika kumagumo uye, kana cheki iyi ikatadza, icharatidza meseji yekukanganisa. Izvi zvinokutendera kuti uzivise mutumiri mhenyu kuti iyo email haina kuunzwa kana Postscreen ichizviona se spam. Izvi zvinowanikwa nekuisa kukosha kwekumanikidza mumatanho ekuongorora. Iko kukosha uku kunokubvumira kuti upedze macheki ekutanga kusvika kumagumo, pasina kuputsa kuwirirana nemutengi pakukundikana kwekutanga, asi panguva imwechete, pakupera, uchiri kuvhara tsamba ye spam pasina kuiendesa kune server.

Kuti ugone kugonesa macheki anodiwa, unofanirwa kuisa iyo inotevera mirairo:

zmprov mcf zimbraMtaPostscreenDnsblSites 'b.barracudacentral.org=127.0.0.2*7' zimbraMtaPostscreenDnsblSites 'zen.spamhaus.org=127.0.0.[10;11]*8' zimbraMtamhatus127.0.0Dzennsbl. ..4]*7' zimbraMtaPostscreenDnsblSites 'zen.spamhaus.org=6*127.0.0.3' zimbraMtaPostscreenDnsblSites 'zen.spamhaus.org=4*127.0.0.2'

Uyu murairo unokutendera kuti uwedzere DNS yekutarisa yeinouya yekubatanidza uchipesana neaviri anozivikanwa eruzhinji spam dhatabhesi uye nhanho mavara zvichienderana nekuti iyo dhatabhesi kero yeanotumira inowanikwa mairi. Iyo yakanyanya chirango nyeredzi dzinounganidzwa nemutengi, zvakanyanya mukana wekuti ave spammer

zmprov mcf zimbraMtaPostscreenDnsblAction enforce

Uyu murairo unosarudza chiito chinoitwa zvichienderana nemigumisiro yekupfuura cheki yeDNS. Muchiitiko ichi, chigumisiro chekuedza chinoyeukwa, uye tsamba pachayo inoramba ichienderera mberi nemiedzo.

zmprov mcf zimbraMtaPostscreenGreetAction simbisa

Nekuti mune SMTP protocol, mushure mekubatana kwakananga, sevha ndiyo yekutanga kutanga kutaurirana nemutengi uye, maererano, Postscreen inogona kutumira kwaziso kumutengi. Nekuda kwekuti vazhinji vatengi ve spam vanotanga kutumira mirairo vasina kumirira kupera kwekukwazisa, vanogona kuzivikanwa nyore. Uyu murairo unokubvumira kuti utarise mhedzisiro yebvunzo iyi, asi ramba uchiita mimwe miedzo.

zmprov mcf zimbraMtaPostscreenNonSmtpCommandAction kudonha

Sechikamu cheiyi cheki, Postscreen inobvumidza iwe kusefa kunze izvo zvinongedzo zvisingabvi kune email vatengi. Sezvo vasingatumire chero maemail, unogona kuvabvisa zvakachengeteka kubva kune server.

zmprov mcf zimbraMtaPostscreenPipeliningAction enforce

Cheki iyi yakavakirwa pachokwadi chekuti nekusarudzika, muSMTP protocol, mutengi anogona kutumira murairo mumwe chete panguva uye omirira sevha kuti apindure kune iwo murairo. Zvisinei, vazhinji spam bots vanozvibata zvakasiyana, kutumira mirairo yakawanda pasina kumirira mhinduro kubva kune server. Izvi zvinokutendera kuti unyatso kuziva spam bot.

Muchidimbu, aya macheki ePostscreen achave akawandisa kuti abvise huwandu hwe spam bots kubva kune server uye zvakanyanya kuderedza mutoro pane yako mail server. Muchiitiko ichi, vanhu vapenyu vachagamuchira shoko rokuti tsamba yavo haina kuendeswa, iyo inoderedza zvakanyanya njodzi yekurasikirwa netsamba dzinokosha nekuda kwePostscreen settings. Kana izvi zvikaitika, unogona kuwedzera mutumiri akavimbika kuPostscreen's whitelist. Kuti ugadzire Postscreen chena uye nhema zvinyorwa, iwe unofanirwa kutanga wagadzira faira /opt/zimbra/conf/postfix/postscreen_wblist.

Tichawedzera runyorwa rwema IP address nema subnet anotenderwa neakavharika mu CIDR table format. Semuenzaniso, tichavhara subnet ye 121.144.169.*, asi tinobvumira kubatana kumwe chete. Kero ye IP kubva pane iyi subnet:

# Mitemo inoongororwa muhurongwa sezvakatsanangurwa.
# Blacklist 121.144.169.* kunze 121.144.169.196.
121.144.169.196/32 mvumo
121.144.169.0/24 kuramba

Ndapota cherechedza kuti kurongeka kwezvinyorwa kwakakosha. Icho chokwadi ndechekuti Postscreen ichaongorora faira rine mavara machena uye matema kusvika pamutambo wekutanga, uye kana iyo yakavharika subnet ikauya pamberi peiyo IP kero yakatenderwa, ipapo cheki hachingosviki pekupinda kuti iyi IP kero yakawedzerwa kune chena. list uye kubatana hazvizoitike kune server.

Mushure mekunge iyo faira ine chena uye nhema rondedzero yagadziriswa uye yachengetwa, unogona kugonesa inoenderana cheki uchishandisa inotevera mirairo:

zmprov mcf zimbraMtaPostscreenAccessList "permit_mynetworks, cidr:/opt/zimbra/conf/postfix/postscreen_wblist"
zmprov mcf zimbraMtaPostscreenBlacklistAction simbisa

Iye zvino Postscreen, mukuwedzera kune cheki yatakatotsanangura, ichawanawo faira ine chena uye nhema rondedzero, iyo inobvumira maneja kugadzirisa zviri nyore nyaya nekusakwanisa kubatana neserver yevatumwa vanovimbwa.

Source: www.habr.com

Tenga inovimbika yekutambira kwemasaiti ane DDoS dziviriro, VPS VDS maseva 🔥 Tenga webhusaiti yakavimbika ine dziviriro yeDDoS, maseva eVPS VDS | ProHoster