On 2025-03-06 at 04:56:03 UTC-0500 (Thu, 6 Mar 2025 10:56:03 +0100)
Petko Manolov via Postfix-users <pet...@nucleusys.com>
is rumored to have said:

On 25-03-06 10:38:54, Danjel Jungersen via Postfix-users wrote:
On 06-03-2025 09:28, Petko Manolov via Postfix-users wrote:
Hmm, zen.spamhaus.org doesn't resolve anymore. I wonder what would be the
correct/contemporary version of:

        reject_rbl_client zen.spamhaus.org=127.0.0.[2..11]
Mine also stopped working some time ago, resolved by setting up my own recursive resolver and creating a free account. The domianname used for
looking up is changed to <some_personal_code>.zen.dq.spamhaus.net

This render useless about 95% of all main.cf examples that can be found on the
net ... :)

A very large fraction of sites do not have the volume or network neighborhood to get Spamhaus to require a key. They've been doing it in varied ways for a very long time, the recent tightening (particularly regarding Hetzner) just hits a larger set of sites.

I use it through rspamd, but guess that it is the same issue.

I'm actively trying to avoid using spam daemons of any sort. If i find my current setup ineffective, next i'll try fail2ban and/or postscreen combination.

Fail2ban is a poor fit by itself for spam control, as it is useless against the worst sources (commodity mailbox providers) who emit a mix of ham and spam, nearly all of it properly authenticated. At best, it reduces return visit log noise from repeat visitors who behave badly enough to cause it. Postscreen using only the pre-greeting tests is flawless at catching compromised spambots.

Using content analysis tools like rspamd or SpamAssassin is required for high-accuracy spam filtering in the modern world. I wish it were not so.

E-mail is such a pain in the ass these days... :)

Amen...

--
 Bill Cole
 b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo@toad.social and many *@billmail.scconsult.com addresses)
 Not Currently Available For Hire
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to