Check out this link showing a example postfix configuration.

https://portal.spamhaus.com/dqs/#3.1.2

I found it to be very helpful in displaying the ranged syntax that spamhaus supports.

On 6/22/2024 4:25 PM, Bill Cole via Postfix-users wrote:
On 2024-06-22 at 16:58:26 UTC-0400 (Sat, 22 Jun 2024 16:58:26 -0400 (EDT))
Wietse Venema via Postfix-users <wie...@porcupine.org>
is rumored to have said:

Bill Cole via Postfix-users:
On 2024-06-22 at 15:19:42 UTC-0400 (Sat, 22 Jun 2024 15:19:42 -0400
(EDT))
Wietse Venema via Postfix-users <wie...@porcupine.org>
is rumored to have said:

[...]
The rbl_reply_maps are searched with the domain specified with
reject_rbl_client.

That includes the optional "=address" portion, added in Postfix
2.8, but that was not added to the much older rbl_reply_maps
documentation.

There is an rbl_reply_maps example (a hash map) at
https://docs.spamhaus.com/datasets/docs/source/40-real-world-usage/MTAs/020-Postfix.html

    your_DQS_key.zen.dq.spamhaus.net=127.0.0.[2..11]
        554 $rbl_class $rbl_what blocked using ZEN - see ... for details

Are you certain that the range syntax works?

Absolutely. If you specify

    reject_rbl_client string-with-complex-syntax

Then the rbl_reply_maps seach key will be that string-with-complex-syntax.

OK. Right now I have multiple items like this in smtpd_recipient_retrictions

    reject_rbl_client KEY.zen.dq.spamhaus.net=127.0.0.2
    reject_rbl_client KEY.zen.dq.spamhaus.net=127.0.0.3
    [... etc.]

So the string being searched is 'KEY.zen.dq.spamhaus.net=127.0.0.2', but if I consolidated those into a single restriction:

    reject_rbl_client KEY.zen.dq.spamhaus.net=127.0.0.[2..11]

that would then search for 'KEY.zen.dq.spamhaus.net=127.0.0.[2..11]', matching the existing map entry.


Is that correct?


_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to