I want to block some spam ips in postfix .so that they cannt send mail to me .

what tag i have to use for this

i am using rbl list in

smtpd_recipient_restrictions =
smtpd_recipient_restrictions =
#reject_invalid_hostname,
#reject_non_fqdn_hostname,
reject_non_fqdn_sender,
reject_non_fqdn_recipient,
reject_unknown_sender_domain,
reject_unknown_recipient_domain,
reject_unauth_pipelining,
permit_mynetworks,
check_recipient_access hash:/etc/postfix/recipient
reject_unauth_destination,
reject_rbl_client relays.ordb.org,
reject_rbl_client dnsbl.njabl.org,
reject_rbl_client opm.blitzed.org,
reject_rbl_client cbl.abuseat.org,
reject_rbl_client bl.spamcop.net,
reject_rbl_client sbl.spamhaus.org,
reject_rhsbl_client blackhole.securitysage.com,
reject_rhsbl_sender blackhole.securitysage.com,
reject_rbl_client blackholes.easynet.nl,
reject_rbl_client proxies.blackholes.wirehub.net,
reject_rbl_client list.dsbl.org,
reject_rbl_client multihop.dsbl.org,
permit



suggest me the tag to block sender ip

You can try my other post here.

http://nixcraft.com/mail-servers/328...blacklist.html

------

I think you're using too many blacklists.

reject_rbl_client relays.ordb.org, #dead, remove
reject_rbl_client dnsbl.njabl.org, #part of sbl-xbl.spamhaus.org, see below
reject_rbl_client opm.blitzed.org, #dead, remove
reject_rbl_client cbl.abuseat.org, #part of sbl-xbl.spamhaus.org, see below
reject_rbl_client bl.spamcop.net, #ok to use now
reject_rbl_client sbl.spamhaus.org, #change to sbl-xbl.spamhaus.org, see spamhaus' site for what it does
reject_rhsbl_client blackhole.securitysage.com, #haven't heard of this one; a cursory check makes it look ok
reject_rhsbl_sender blackhole.securitysage.com, #see above
reject_rbl_client blackholes.easynet.nl, # dead. remove
reject_rbl_client proxies.blackholes.wirehub.net, #see above
reject_rbl_client list.dsbl.org, #no automatic removal; many entries that are years old. would not use.
reject_rbl_client multihop.dsbl.org, #see above

In addition, I think it's smarter to only do a little DNSBL-based blocking at the STMP level, and let spam software like spamassassin do further checks and assign a spam score. I use sbl-xbl.spamhaus.org and bl.spamcop.net only, because they have very few false positives. See http://www.dnsbl.com/ for more DNSBL information.

You'll have to define an access table and call it with check_client_access.