Luc Pardon:
> On 16-11-10 01:23, Wietse Venema wrote:
> > Thinking of the longer term, ...
>
> Maybe the following is too wild in this context, but while the cards
> are on the table and since the need for the new wild card syntax arose
> in relation to whitelisting, I'll throw it in anyway:
>
> RFC5782 says that an operational whitelist MUST contain an entry for
> 127.0.0.2 and MUST NOT contain one for 127.0.0.1, and whitelist users
> MUST periodically check this to see if the list is still active.
I can add a note to Postfix documentation. However, whitelists
primarily target false positives in anti-spam CONTENT FILTERS.
Content filters are not part of Postfix as we know it today.
I don't think it is a good idea to automatically disable DNWSL
lookup in Postfix just because some DNSWL check failed during a
network outage, whether the outage is local or remote.
Maybe someone can donate a 20-line Perl script that scans "postconf
-n" output for the names of known DNSWLS and that pokes those DNSWLs
for liveness. Such a script could be run from a cron job that
mails the result to the system administrator.
Wietse
