Re: postscreen_dnsbl_whitelist_threshold and SORBS and Google

2018-03-02 Thread Dominic Raferd
On 2 March 2018 at 07:53, MRob wrote: > On 2018-03-02 07:24, Dominic Raferd wrote: >> >> For external rbls this is what I currently use (extract from >> smtpd_recipient_restrictions list in main.cf, not postscreen), I have >> not been made aware of any false positives in a

Re: postscreen_dnsbl_whitelist_threshold and SORBS and Google

2018-03-01 Thread MRob
On 2018-03-02 07:24, Dominic Raferd wrote: On 1 March 2018 at 23:24, J Doe wrote: I know there are a number of lists of publicly available DNS BL’s but is there a list of BL’s that have a low false-positive history ? I’m aware that false positives do happen, but

Re: postscreen_dnsbl_whitelist_threshold and SORBS and Google

2018-03-01 Thread MRob
On 2018-03-01 23:24, J Doe wrote: Hi, On Mar 1, 2018, at 4:17 PM, MRob wrote: Good suggestions thank you everyone. Over the last 24hours I saw clients SORBS listed: ** a few that were listed by other RBLs ** many that were senders I can't block or delay: facebook,

Re: postscreen_dnsbl_whitelist_threshold and SORBS and Google

2018-03-01 Thread Dominic Raferd
On 1 March 2018 at 23:24, J Doe wrote: > I know there are a number of lists of publicly available DNS BL’s but is > there a list of BL’s that have a low false-positive history ? I’m aware that > false positives do happen, but blacklisting Gmail seems to be

Re: postscreen_dnsbl_whitelist_threshold and SORBS and Google

2018-03-01 Thread J Doe
Hi, > On Mar 1, 2018, at 4:17 PM, MRob wrote: > Good suggestions thank you everyone. Over the last 24hours I saw clients > SORBS listed: > > ** a few that were listed by other RBLs > ** many that were senders I can't block or delay: facebook, google, etc > ** one or two

Re: postscreen_dnsbl_whitelist_threshold and SORBS and Google

2018-03-01 Thread MRob
On 2018-03-01 17:51, Andreas Schamanek wrote: I also use postwhite and similar whitelisting, but I also have postscreen_dnsbl_sites = ... list.dnswl.org=127.0.[5;9].0*-2 Good suggestions thank you everyone. Over the last 24hours I saw clients SORBS listed: ** a few that were

Re: postscreen_dnsbl_whitelist_threshold and SORBS and Google

2018-03-01 Thread Andreas Schamanek
I also use postwhite and similar whitelisting, but I also have postscreen_dnsbl_sites = ... list.dnswl.org=127.0.[5;9].0*-2 -- -- Andreas :-)

Re: postscreen_dnsbl_whitelist_threshold and SORBS and Google

2018-03-01 Thread Karol Augustin
On 01/03/18 04:47, MRob wrote: What other people do about this? Remove SORBS completely? Increase dnswl socring? Reduce SORBS scoring? I am using postwhite to generate cidr list from SPF records of known senders and have them whitelisted in Postfix. It saves a lot of delays for postfix

Re: postscreen_dnsbl_whitelist_threshold and SORBS and Google

2018-03-01 Thread Wietse Venema
Don't use SORBS. Wietse

postscreen_dnsbl_whitelist_threshold and SORBS and Google

2018-02-28 Thread MRob
Right now and for at least the last 24hours+ gmail IPs are on SORBS. Good, I don't mind. However, it's causing Gmail to hit after-220 deep protocol tests in postscreen and this causes long delays because Gmail rotates sending IPs. I scroe dnsbl.sorbs.net 2 points. dnswl.org: