>> What about trouble with the DNSBL lists? I know when I changed my IP >> address I had to work to get the new one removed from a few blacklists >> it had previously been placed on. I wasn't sending spam, but my >> messages would have been blocked under that config if I hadn't done >> the work to get the IP off the lists. >> >> - Grant >> > > We do get false positives from the blacklists on rare occasion, but they're > the same ones we got before postscreen. > > Before postscreen, we had, > > smtpd_recipient_restrictions = > permit_mynetworks, > ... > reject_rbl_client psbl.surriel.com, > reject_rbl_client bl.spamcop.net, > reject_rbl_client zen.spamhaus.org, > reject_rbl_client b.barracudacentral.org, > permit > > After postscreen, we have, > > smtpd_recipient_restrictions = > permit_mynetworks, > ... > permit > > > postscreen_dnsbl_sites = > psbl.surriel.com, > bl.spamcop.net, > zen.spamhaus.org, > b.barracudacentral.org > > The two should be more or less equivalent considering that > postscreen_dnsbl_threshold = 1. (I should mention that you have to register > with barracuda before using their list.)
Got it. Your explanations are positively lucid. I added this to /etc/postifx/main.cf: postscreen_greet_action = enforce postscreen_pipelining_enable = yes postscreen_pipelining_action = enforce postscreen_non_smtp_command_enable = yes postscreen_non_smtp_command_action = enforce postscreen_bare_newline_enable = yes postscreen_bare_newline_action = enforce and I commented this and restarted postfix: #check_policy_service inet:127.0.0.1:10030 Should this effectively disable postgrey and enable postscreen? - Grant
