On 2025-01-13 17:41, Steffan Cline via Postfix-users wrote:
> 
> reject_rhsbl_sender mykey.dbl.dq.spamhaus.net=127.0.1.[2..99],                
>        ^^^^^
Let me ask you a stupid question - how long in real is "mykey" above?


BTW you can use DQS via public resolvers just fine - although it's
better to use own DNS with QNAME-minimization turned off.
I use pdns-recursor with:

recursor:
   forward_zones_file: '/etc/pdns-recursor/zones_recurse'

And zones_recurse file having (actually, dozens of) entries:
+spamhaus.org=127.0.0.1:5343
+spamhaus.net=127.0.0.1:5343
+spamcop.net=127.0.0.1:5343
+barracudacentral.org=127.0.0.1:5343
+abusix.zone=127.0.0.1:5343

pointing to another recursor having QNAME-minimization disabled.
The front recursor handles 700+ qps, while the back one ~20, so not much
cost in terms of duplicated record cache.
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to