Peter via Postfix-users:
> On 25/03/25 07:43, Wietse Venema via Postfix-users wrote:
>
> > Too late! I have already updated the documentation (on www.porcupine.org;
> > mirrrors will pick it up in the next hour or so).
>
> I'm guessing that you added this to postscreen_dnsbl_sites and
> reject_rbl_client rbl_domain:
>
> "NOTE: Always use a local non-forwarding resolver for DNS reputation
> lookups. Avoid public resolvers or ISP resolvers."
>
> I would suggest this as well:
>
> "Reputation lists may have additional policies and restrictions that you
> need to follow when using them, you should not configure a list in
> Postfix until you are fully aware of its requirements."
>
> ...or something like that.
Yeah. And as Spamhaus says, it is OK to use a public/open resolver
a long as your queries use your unique API key.
There are multiple issues that have to be compressed into a short text.
"Respect the usage policies of reputation services. Avoid public
or ISP resolvers, unless reputation queries use your unique API
key."
Wietse
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
