[pfx] Re: [ext] Re: Question about postscreen

2023-11-02 Thread Ralf Hildebrandt via Postfix-users
* Matus UHLAR - fantomas via Postfix-users :

> > And thus the solution is: Don't use the dnsbl in postscreen, but ONLY
> > in spamassassin/rspamd instead.
> 
> No problem, you can safely use postscreen with multiple DNSBLs and DNSWLs.
> - just don't rely on single hit, unless it's your own DNSBL.

Hey, it was not my idea, but the OP's :)

-- 
Ralf Hildebrandt
  Geschäftsbereich IT | Abteilung Netz | Netzwerk-Administration
  Invalidenstraße 120/121 | D-10115 Berlin
  Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962
  ralf.hildebra...@charite.de | https://www.charite.de

___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org


[pfx] Re: [ext] Re: Question about postscreen

2023-11-02 Thread Matus UHLAR - fantomas via Postfix-users

On 02.11.23 10:49, Ivan Ionut via Postfix-users wrote:
> Hi, it's possible that  postscreen does not block the email when
> postscreen_dnsbl_threshold is reached but to pass that email to
> spamassassin(with a score and a tag).



* Matus UHLAR - fantomas via Postfix-users :

Postscreen does not tag. It passes or blocks the mail.


On 02.11.23 12:49, Ralf Hildebrandt via Postfix-users wrote:

And thus the solution is: Don't use the dnsbl in postscreen, but ONLY
in spamassassin/rspamd instead.


No problem, you can safely use postscreen with multiple DNSBLs and DNSWLs.
- just don't rely on single hit, unless it's your own DNSBL.

Example:

postscreen_dnsbl_threshold=2
postscreen_dnsbl_sites =
 [censored]*4,
 zen.spamhaus.org=127.0.0.[0..255],
 dnsbl.sorbs.net=127.0.0.[0..255],
 bl.spamcop.net=127.0.0.2,
 list.dnswl.org=127.0.[0..255].[0..255]*-1,
 list.dnswl.org=127.0.[0..255].3*-1

which means, combination of two DNSBLs, three DNSBLs with DNSWL.org listing,
four DNSBLs with DNSWL.org listing of priority HIGH.

the [censored] DNSBL will override anything.

I think there are multiple examples of postscreen_dnsbl_sites in this list's 
archives


--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Windows 2000: 640 MB ought to be enough for anybody
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org


[pfx] Re: [ext] Re: Question about postscreen

2023-11-02 Thread Ralf Hildebrandt via Postfix-users
* Matus UHLAR - fantomas via Postfix-users :
> On 02.11.23 10:49, Ivan Ionut via Postfix-users wrote:
> > Hi, it's possible that  postscreen does not block the email when
> > postscreen_dnsbl_threshold is reached but to pass that email to
> > spamassassin(with a score and a tag).
> 
> Postscreen does not tag. It passes or blocks the mail.

And thus the solution is: Don't use the dnsbl in postscreen, but ONLY
in spamassassin/rspamd instead.

-- 
Ralf Hildebrandt
  Geschäftsbereich IT | Abteilung Netz | Netzwerk-Administration
  Invalidenstraße 120/121 | D-10115 Berlin
  Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962
  ralf.hildebra...@charite.de | https://www.charite.de

___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org