Dnia 7.09.2024 o godz. 08:25:44 Gilgongo via Postfix-users pisze: > I notice Spamhaus say that for smaller hosts, RBL blocking at smtp level is > not recommended, and instead it’s better to use a milter for RBL checking. > > https://docs.spamhaus.com/datasets/docs/source/40-real-world-usage/PublicMirrors/MTAs/030-Sendmail.html > > I can see the logic in that, since a milter gives you much more control. So > for smaller hosts running postscreen, do I take it you just use allow lists > with dnsbl_allowlist_threshold to minimise problems with pregreet tests (if > you use them)? Or do you have some combination (eg to weed out very low > reputation senders before they get to the milter)?
I use only two RBLs that IMHO are very reliable and don't give false positives, that is, bl.spamcop.net and zen.spamhaus.org, and I use them at SMTP level, directly in Postfix. In addition to this, I also use a manually maintained blacklist of host/senders/domains that are rejected at SMTP level, and similar whitelist of those that are exempt of RBL checking (although I don't remember when I had to actually modify the last one). After these checks, if email is passed, it goes through SpamAssassin, and finally through my custom set of antispam rules in procmail (the latter is an old solution that I used many years ago on my old sendmail-based server, and I simply kept it when migrating to new server and Postfix). These don't reject mail, only put it into spam folder if it exceeds some threshold. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub." _______________________________________________ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org
