[pfx] Re: postscreen question

2023-04-29 Thread Ken Peng via Postfix-users
Hello For this parameter of postscreen: postscreen_dnsbl_allowlist_threshold The docs says: 1. Specify a negative value to enable this feature. 2. This feature is available in Postfix 3.6 and later. Available as postscreen_dnsbl_whitelist_threshold in Postfix 2.11 - 3.5. So my questions

[pfx] Re: postscreen question

2023-04-29 Thread Phil Biggs via Postfix-users
Saturday, April 29, 2023, 5:40:19 PM, Ken Peng via Postfix-users wrote: > Hello > When I enabled postscreen, why even gmail's sender IP was greylisted? > The log says: > Apr 29 15:35:35 mxin postfix/postscreen[59408]: NOQUEUE: reject: RCPT from > [209.85.160.53]:50219: 450 4.3.2 Service

[pfx] Re: postscreen question

2023-04-29 Thread Bill Cole via Postfix-users
On 2023-04-29 at 06:43:01 UTC-0400 (Sat, 29 Apr 2023 10:43:01 +) Ken Peng via Postfix-users is rumored to have said: Nope. I found that if I enabled protocol test, every provider including gmail/orange/vodafone sending messages to me will get response code 450. After I disabled those

[pfx] Re: postscreen question

2023-04-29 Thread Bernardo Reino via Postfix-users
On Sat, 29 Apr 2023, Ken Peng via Postfix-users wrote: Nope. I found that if I enabled protocol test, every provider including gmail/orange/vodafone sending messages to me will get response code 450. After I disabled those protocol test, everything goes fine. So what's the correct way to

[pfx] Re: postscreen question

2023-04-29 Thread Allen Coates via Postfix-users
The code 450 is the "deep tests"  doing their stuff. When a a remote host calls for the first time, it sees a temp-fail (code 450). When the host  calls back, *USING THE SAME IP ADDRESS*,  it will be passed through to the mail server.   The host has to call twice to get through. With  gmail

[pfx] Re: postscreen question

2023-04-29 Thread Ken Peng via Postfix-users
Nope. I found that if I enabled protocol test, every provider including gmail/orange/vodafone sending messages to me will get response code 450. After I disabled those protocol test, everything goes fine. So what's the correct way to deal with postscreen protocol tests? I mean the following

[pfx] Re: postscreen question

2023-04-29 Thread Bernardo Reino via Postfix-users
On Sat, 29 Apr 2023, Ken Peng via Postfix-users wrote: Hello When I enabled postscreen, why even gmail's sender IP was greylisted? Did you expect or configure to deal with gmail differently? The log says: Apr 29 15:35:35 mxin postfix/postscreen[59408]: NOQUEUE: reject: RCPT from

[pfx] Re: postscreen question

2023-04-29 Thread Ken Peng via Postfix-users
Hello When I enabled postscreen, why even gmail's sender IP was greylisted? The log says: Apr 29 15:35:35 mxin postfix/postscreen[59408]: NOQUEUE: reject: RCPT from [209.85.160.53]:50219: 450 4.3.2 Service currently unavailable; from=, to=, proto=ESMTP, helo= And this is my configuration

[pfx] Re: postscreen question

2023-04-29 Thread mailmary--- via Postfix-users
The postscreen feature for RBL checks allows us to use scoring! My configuration is based on this one here: https://gitlab.com/noumenia/aetolos/-/blob/master/modules/el8/postfix/maincf.tpl Take a look at lines 100 to 132. For example: postscreen_dnsbl_action = enforce (reject email with

[pfx] Re: postscreen question

2023-04-28 Thread Phil Biggs via Postfix-users
Saturday, April 29, 2023, 10:15:41 AM, Ken Peng via Postfix-users wrote: > Sorry i have a question to postscreen. > I saw many people use postscreen for RBL checks. > But postfix itself have the RBL checks already: > smtpd_recipient_restrictions = >... >reject_rbl_client

[pfx] Re: postscreen question

2023-04-28 Thread Ken Peng via Postfix-users
April 28, 2023 at 1:02 AM, "Phil Stracchino via Postfix-users" wrote: > > On 4/27/23 04:47, Ralph Seichter via Postfix-users wrote: > > > > > * Ken Peng via Postfix-users: > > Using rspamd instead of postscreen? > > I'm not quite sure what you mean by that. > > If you suggest relying on

[pfx] Re: postscreen question

2023-04-27 Thread Phil Stracchino via Postfix-users
On 4/27/23 04:47, Ralph Seichter via Postfix-users wrote: * Ken Peng via Postfix-users: Using rspamd instead of postscreen? I'm not quite sure what you mean by that. If you suggest relying on rspamd only, and forgo postscreen, I have to disagree. In my experience, postscreen has proven

[pfx] Re: postscreen question

2023-04-27 Thread Matus UHLAR - fantomas via Postfix-users
On 26.04.23 19:40, Ken Peng via Postfix-users wrote: Using rspamd instead of postscreen? no, using spamassassin or rspamd in addition to postscreen. postscreen is great for eliminating bots, which is something other spam filters only hardly detect. It's also can machines listed in multiple

[pfx] Re: postscreen question

2023-04-27 Thread Ralph Seichter via Postfix-users
* Ken Peng via Postfix-users: > Using rspamd instead of postscreen? I'm not quite sure what you mean by that. If you suggest relying on rspamd only, and forgo postscreen, I have to disagree. In my experience, postscreen has proven highly useful in spam prevention, in particular when DNSBL

[pfx] Re: postscreen question

2023-04-27 Thread Mihaly Zachar via Postfix-users
On Wed, 26 Apr 2023 at 18:47, Wietse Venema via Postfix-users < postfix-users@postfix.org> wrote: > Don't do it unless you aree willing to suffer some pain. The mere > fast that a button exists does not impy that everyone must use it. > > Dear Wietse, Could you please give me some examples where

[pfx] Re: postscreen question

2023-04-26 Thread Ken Peng via Postfix-users
Using rspamd instead of postscreen? > > Dear All, > > I am building a new server where I would like to build the best spam filter > possible :) > I am checking postscreen these days. I am planning to turn on the "deep > tests" as well, but it seems to be really scary to me :) > > In the doc

[pfx] Re: postscreen question

2023-04-26 Thread Bill Cole via Postfix-users
On 2023-04-26 at 11:56:01 UTC-0400 (Wed, 26 Apr 2023 17:56:01 +0200) Mihaly Zachar via Postfix-users is rumored to have said: Dear All, I am building a new server where I would like to build the best spam filter possible :) I am checking postscreen these days. I am planning to turn on the

[pfx] Re: postscreen question

2023-04-26 Thread Wietse Venema via Postfix-users
Mihaly Zachar via Postfix-users: > Dear All, > > I am building a new server where I would like to build the best spam filter > possible :) > I am checking postscreen these days. I am planning to turn on the "deep > tests" as well, but it seems to be really scary to me :) Don't do it unless you