On 2/10/2014 9:45 PM, Michael McCallister wrote: > On 2/10/2014 7:43 PM, Wietse Venema wrote: >> Michael McCallister: >>> Hi, >>> >>> Does postscreen_dnsbl_ttl apply to nxdomain responses as well? For >>> example, lets assume an IP lookup on zen.spamhaus.org returns >>> nxdomain >>> and postscreen_dnsbl_ttl is set to an hour - postscreen won't check >>> again for another hour? Or does that caching only apply to >>> non-nxdomain >>> responses. >> postscreen_dnsbl_ttl (default: 1h) >> The amount of time that postscreen(8) will use the result >> from a suc- >> cessful DNS blocklist test. During this time, the client IP >> address is >> >> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ >> excluded from this test. >> ^^^^^^^^^^^^^^^^^^^^^^^^^^^ >> >> Wietse > > Right - but that does not answer my question. My question is if a > nxdomain result is considered a "successful DNS blocklist test". >
Yes.
