Собственно меня данная настройка спасла от спама на 99+%strict_rfc821_envelopes = yes
disable_vrfy_command = yes
smtpd_delay_reject = yes
smtpd_helo_required = yes
policy_time_limit=3600
smtpd_client_restrictions =
permit_mynetworks
# Geoip
check_policy_service unix:private/policy
# Access list
check_client_access hash:/etc/postfix/access_client
# DNS Regexp
check_client_access regexp:/etc/postfix/dul_checks
reject_rbl_client bl.spamcop.net
reject_rbl_client cbl.abuseat.org
# reject_rbl_client dnsbl.sorbs.net
# reject_rbl_client psbl.surriel.com
# reject_rbl_client spamsources.fabel.dk
# reject_rbl_client opm.blitzed.org
reject_rbl_client combined.njabl.org
reject_rbl_client dul.ru
permit
smtpd_helo_restrictions =
permit_mynetworks,
check_helo_access regexp:/etc/postfix/helo_access,
check_helo_access regexp:/etc/postfix/helo_regexp,
check_helo_access regexp:/etc/postfix/dul_checks,
reject_invalid_hostname
smtpd_sender_restrictions =
permit_mynetworks,
check_sender_access regexp:/etc/postfix/sender_access,
check_policy_service unix:private/policy,
reject_non_fqdn_sender,
reject_unknown_sender_domain
smtpd_recipient_restrictions =
reject_unauth_pipelining,
permit_mynetworks,
check_sender_access regexp:/etc/postfix/sender_access,
reject_non_fqdn_recipient,
reject_unknown_recipient_domain,
reject_unlisted_recipient,
reject_unauth_destination,
# Postgrey
check_policy_service inet:127.0.0.1:60000,
permit