Wie können bestimmte Absender geblockt werden ?

[Andreas Reschke]

Hallo zusammen,

wie kann ich ich Spam, der über outbound.protection.outlook.com 
geschickt und als Absender no-reply at sharepointonline.com hat, blocken?

Ich will/kann ja nicht komplett Microsoft blocken.

Auszug aus /var/log/maillog

May  9 18:29:38 odroidh2 postfix/smtpd[11196]: connect from 
mail-eopbgr810082.outbound.protection.outlook.com[40.107.81.82]
May  9 18:29:39 odroidh2 postfix/smtpd[11196]: Anonymous TLS connection 
established from 
mail-eopbgr810082.outbound.protection.outlook.com[40.107.81.82]: TLSv1.2 
with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)
May  9 18:29:40 odroidh2 postfix/smtpd[11196]: A2B006253A: 
client=mail-eopbgr810082.outbound.protection.outlook.com[40.107.81.82]
May  9 18:29:41 odroidh2 postfix/cleanup[11207]: A2B006253A: 
message-id=<8360dca1-d2a9-4d78-9721-c530d9b7a3b7 at BY2NAM01FT014.eop-nam01.prod.protection.outlook.com>
May  9 18:29:41 odroidh2 postfix/qmgr[21207]: A2B006253A: 
from=<no-reply at sharepointonline.com>, size=29858, nrcpt=1 (queue active)
May  9 18:29:41 odroidh2 postfix/smtpd[11196]: disconnect from 
mail-eopbgr810082.outbound.protection.outlook.com[40.107.81.82]
May  9 18:29:47 odroidh2 postfix/smtpd[11214]: connect from 
localhost.localdomain[127.0.0.1]
May  9 18:29:47 odroidh2 postfix/smtpd[11214]: 8BC406253B: 
client=localhost.localdomain[127.0.0.1], orig_client=unknown[127.0.0.1]
May  9 18:29:47 odroidh2 postfix/cleanup[11207]: 8BC406253B: 
message-id=<8360dca1-d2a9-4d78-9721-c530d9b7a3b7 at BY2NAM01FT014.eop-nam01.prod.protection.outlook.com>
May  9 18:29:47 odroidh2 postfix/smtpd[11214]: disconnect from 
localhost.localdomain[127.0.0.1]
May  9 18:29:47 odroidh2 postfix/qmgr[21207]: 8BC406253B: 
from=<no-reply at sharepointonline.com>, size=30310, nrcpt=1 (queue active)
May  9 18:29:47 odroidh2 amavis[8528]: (08528-03) Passed CLEAN 
{RelayedOpenRelay}, [127.0.0.1] [13.84.45.239] 
<no-reply at sharepointonline.com> -> <andreas at rirasoft.de>, Message-ID: 
<8360dca1-d2a9-4d78-9721-c530d9b7a3b7 at by2nam01ft014.eop-nam01.prod.protection.outlook.com>, 
mail_id: SgbDxwitzLuK, Hits: 3.5, size: 29831, queued_as: 8BC406253B, 
dkim_sd=selector1:sharepointonline.com, 6332 ms
May  9 18:29:47 odroidh2 postfix/smtp[11210]: A2B006253A: 
to=<andreas at rirasoft.de>, relay=127.0.0.1[127.0.0.1]:10024, delay=7.5, 
delays=1.1/0.05/0.01/6.3, dsn=2.0.0, status=sent (250 2.0.0 from 
MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 8BC406253B)


Ein Eintrag (/\.sharepointonline.com$/    REJECT Mail from .sharepoint 
not accepted) in der sender_access.regexp hilt schon mal nicht.


Gruss

Andreas