Lars Roland wrote:
> While setting up a DNS blacklist filter it looks like the dnsbl plugin
> isn't blacklisting remote IP, if the sending MTA is using qpsmtpd's
> TLS plugin.

I think you mean if the sending MTA uses TLS (it doesn't have to be qpsmtpd).  I
test with swaks, which should have the same behavior.

I think this falls under the more general issue that plugins which fire during
connect are wiped out when TLS is initiated, since *all* information about the
client before TLS is started must be ignored after TLS has been negotiated.  See
the thread here:

        http://www.nntp.perl.org/group/perl.qpsmtpd/5371

about "Connection notes across TLS?" for more details and a possible solution...

John

Reply via email to