Am 16.01.2015 um 21:48 schrieb Eugene R:
If you're rejecting good mail more than "rarely", you should
reevaluate your restrictions.
In particular, most built-in HELO checks are likely to reject legit
mail, and not terribly effective against current spam bots. The
"reject_unknown_client" is also likely to reject wanted mail. Use
these with caution.
Actually the set I have is surprisingly effective and also surprisingly
good in keeping FPs low -- much, much better than anything I saw from SA
and DSPAM, and with virtually no server or management overhead. That's
why I only want a controlled workaround for misconfigured senders
just setup "rbldnsd" and use "permit_dnswl_client" with your own
whitelist, that way you can even create different return values of your
whitelist and place them to override different stages of your
restricitions by trust-levels