On Sat, 2011-01-22 at 12:43:55 -0500, Michael Scheidell wrote:

> oh, and to be safe:
> 
> reject_rhsbl_helo dbl.spamhaus.org=127.0.1.2,
> reject_rhsbl_client dbl.spamhaus.org=127.0.1,2,
> reject_rhsbl_sender dbl.spamhaus.org=127.0.1,2,

Sound advice to advocate good practices, but in more recent version of
Postfix, this should not be required.  Wietse cleaned up the
reject_rhsbl code to hopefully avoid these false positives.

> or it might reject:  mail from: <idiot@23.45.67.5>

That should be rejected even before the RHSBL checks with:

501 5.1.7 Bad sender address syntax

> (127.255.255.255 is returned if you pass it an ip address)

127.0.1.255 is returned for IP queries to the SpamHaus DBL.

> withing seconds of putting on a 2000 user box, got hits. (just using
> _sender) looked up the sender's name and found 27 spams sent today
> that SA had to deal with (no more!)

Glad to hear it's working well for you - I'm having a similar
experience!

-- 
Sahil Tandon <sa...@freebsd.org>

Reply via email to