Hi, On Thu, Jun 16, 2016 at 10:16 AM, <jaso...@mail-central.com> wrote: > Fwiw, I've moved the DNSBL issue out of SA and put it 'in front' with > Postfix's postscreen. > > Instead of just *one* DNSBL, which is imo always a risk, I use multiple > dnsbls, and weight them in scoring. > > In my experience, it works fantastically well. > > A great write up on the approach is here > > http://rob0.nodns4.us/postscreen.html
Yes, this does work well. Have you done anything to disable or otherwise control the same lookups that exist from within spamassassin? We've had some trouble with overlap or some of the rules adding scores to messages with Received headers that aren't checked by postscreen. I've had to disable or lower the score for rules like RCVD_IN_SBL_CSS, some of the MSPIKE rules, and others. We were also using the senderscore RBL based on Reindel and others recommendations, but disabled it after it just rejected too much ham.