On 16.10.23 10:33, Ivan Ionut via Postfix-users wrote:
> And in my logs I have this example of blocked email(a non-spam one):
>
>    blocked using dnsbl-2.uceprotect.net
>    blocked using spam.dnsbl.anonmails.de
>
>So only two of them, not four. And I want to know if there is a way to
>log more information about the threshold for each rejected email(maybe
>for each dnsbl_site).

Matus UHLAR - fantomas via Postfix-users:
Note that this can even result into logging DNSWL as reason for blocking, if
e.g.  IP hits one DNSWL but multiple DNSBLs.  You can use
postscreen_dnsbl_reply_map to map the list into other strings, e.g.

On 16.10.23 10:25, Wietse Venema via Postfix-users wrote:
Are you sure that postscreen will use a whitelist name as the reason
for blocking?

This happened to me a few years ago, so unless this was changed in later postfix versions, it will (haven't checked).

When postscreen accumulates a client score, it remembers not only
the total (score->total), but also the name (score->dnsbl_name) and
weight (score->dnsbl_weight) of the service that made the largest
positive contribution to that score, and uses that name as the
reason for blocking.

                   if (score->dnsbl_name == 0
                       || score->dnsbl_weight < site->weight) {
                       score->dnsbl_name = head->safe_dnsbl;
                       score->dnsbl_weight = site->weight;
                   }
                   score->total += site->weight;

In the code fragment,
- head->safe_dnsbl is a dnsbl name configured with postscreen_dnsbl_sites
 which may be censored with postscreen_dnsbl_reply_map,
- site->weight is a weight configured with postscreen_dnsbl_sites.

for dnswl's the weight is lower than 0, perhaps the name should not be considered in such case.

--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Chernobyl was an Windows 95 beta test site.
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to