> On 21 Jul 2016, at 18:42, /dev/rob0 <r...@gmx.co.uk> wrote: > > Can't you do the same thing (to solve your unstated problem, which I > assume might be to avoid delays with after-220 tests) with DNSWL and > postscreen_dnsbl_whitelist_threshold? > > Most large-scale legitimate senders are listed in list.dnswl.org. > Those which are not listed are usually small enough to retry from the > same IP address, so the delays won't be much.
I am already doing this but I would personally much rather have the choice of a domain white/black listing as it is a much cleaner solution even for smaller and unlisted domains with the extra delay cost of a single reverse lookup of course, if that is the problem. The DNSW/BL only covers single IP access and not a whole domain. A reverse lookup would cover both white and black listing of whole domains of anyone’s choice and make life easier/harder dealing with smaller email communities.
