Voytek skrev den 2017-08-07 05:17:
I have a user's inbound mail blocked by barracudacentral, is there a
way
to exempt this particular user/domain from this particular RBL check ?
no thats completely impossible without logs
things to consider, postscreen, remove rbl client ip from your rules and
move this to postscreen, then whitelist ips in postscreen that should
not be client ip blocked
so remove reject_rbl_client and check_client_access in your config, this
can be done better in postscreen
keep the rest as good, more help show logs
or what else can or should I do ?
this is the only known issue with barracuda I have and, otherwise it
seems
quite effective, I think ?
smtpd_recipient_restrictions =
reject_unknown_sender_domain,
reject_unknown_recipient_domain,
reject_non_fqdn_sender,
reject_non_fqdn_recipient,
reject_unlisted_recipient,
check_policy_service inet:127.0.0.1:7777,
permit_mynetworks,
check_sasl_access hash:/etc/postfix/sasl_access
permit_sasl_authenticated,
reject_unauth_destination,
check_recipient_access hash:/etc/postfix/recipient_no_checks,
check_recipient_access pcre:/etc/postfix/recipient_checks.pcre,
check_helo_access hash:/etc/postfix/helo_checks,
check_sender_access hash:/etc/postfix/sender_checks,
check_client_access hash:/etc/postfix/client_checks,
check_client_access pcre:/etc/postfix/client_checks.pcre,
reject_rbl_client zen.spamhaus.org,
reject_rbl_client b.barracudacentral.org,
reject_rhsbl_client dbl.spamhaus.org,
reject_rhsbl_sender dbl.spamhaus.org,
reject_rbl_client psbl.surriel.com,
reject_rbl_client ix.dnsbl.manitu.net,
reject_rbl_client bl.spamcop.net,
reject_rbl_client cbl.abuseat.org,
reject_rhsbl_sender dsn.rfc-ignorant.org,
check_policy_service inet:127.0.0.1:10031
pflogsumm /var/log/maillog.1 | grep block
blocked using b.barracudacentral.org (total: 482)
blocked using bl.spamcop.net (total: 40)
blocked using dbl.spamhaus.org (total: 133)
blocked using ix.dnsbl.manitu.net (total: 37)
blocked using psbl.surriel.com (total: 14)
blocked using zen.spamhaus.org (total: 3438)
