Voytek Eymont a écrit : > I have a user getting rejects from several valid senders based on > ix.dnsbl.manitu.net blacklist, like: > > NOQUEUE: reject: RCPT from smtpout6.poczta.onet.pl[213.180.147.166]: 554 > 5.7.1 Service unavailable; Client host [213.180.147.166] blocked using > ix.dnsbl.manitu.net; Spam sent to the mailhost relay.heise.de was detected > by NiX Spam at Tue, 16 Mar 2010 12:36:26 +0100, see > http://www.dnsbl.manitu.net/lookup.php?value=213.180.147.166; > from=<x...@poczta.onet.pl> to=<y...@domain.tld> proto=ESMTP > helo=<smtpout6.poczta.onet.pl> > > all these senders were from '@poczta.onet.pl' and, smtpout*.poczta.onet.pl > hosts > > what's the best way to get her emails through ? > > add her email 'y...@domain.tld 'to /etc/postfix/recipient_no_checks ? >
not sure the user wants to skip all spam checks just because of one DNSBL. better do the same check after zen.spamhaus.org. alternatively, use dnswl.org (see www.dnswl.org on how to use it with postfix) just before DNSBL checks. (and if you have a contact at onet.pl, tell them to stop "fixing" headers. They add a TAB after "From:" and "Date:", which is stupid and looks like rateware behaviour....). > > smtpd_recipient_restrictions = > permit_sasl_authenticated, > permit_mynetworks, > check_client_access hash:/etc/postfix/pop-before-smtp, > reject_unauth_destination, > check_recipient_access hash:/etc/postfix/recipient_no_checks, > reject_non_fqdn_sender, > reject_non_fqdn_recipient, > reject_invalid_hostname, > reject_non_fqdn_hostname, > reject_unknown_sender_domain, > reject_unknown_reverse_client_hostname > reject_unlisted_recipient, > check_sender_access hash:/etc/postfix/freemail_access, > check_recipient_access pcre:/etc/postfix/recipient_checks.pcre, > check_helo_access hash:/etc/postfix/helo_checks, > check_sender_access hash:/etc/postfix/sender_checks, > check_client_access hash:/etc/postfix/client_checks, > check_client_access pcre:/etc/postfix/client_checks.pcre, > reject_rbl_client zen.spamhaus.org, > reject_rbl_client combined.njabl.org, > reject_rbl_client bl.spamcop.net, > reject_rhsbl_sender dsn.rfc-ignorant.org, > reject_rbl_client ix.dnsbl.manitu.net, > reject_rbl_client psbl.surriel.com, > check_policy_service inet:127.0.0.1:10031, > permit > > >
