Hello,
With the new release 2.8.0,
in main.cf, I have :
#
# PostScreen
#
#postscreen_blacklist_networks = cidr:/etc/postfix/rules/blacklist
postscreen_blacklist_action = drop
#postscreen_whitelist_networks = $mynetworks
postscreen_acces_list = cidr:/etc/postfix/rules/blacklist, permit_mynetworks
postscreen_greet_wait = ${stress?2}${stress:6}s
postscreen_greet_action = enforce
postscreen_dnsbl_threshold = 2
postscreen_dnsbl_sites = zen.dnsbl*2, cbl.abuseat.org*2, z.mailspike.net*2,
bl.spamcop.net*1, b.barracudacentral.org*1
postscreen_dnsbl_reply_map = texthash:/etc/postfix/dnsbl_reply
postscreen_dnsbl_action = enforce
but postconf -n | grep postscreen gives :
postscreen_blacklist_action = drop
postscreen_dnsbl_action = enforce
postscreen_dnsbl_reply_map = texthash:/etc/postfix/dnsbl_reply
postscreen_dnsbl_sites = zen.dnsbl*2, cbl.abuseat.org*2, z.mailspike.net*2,
bl.spamcop.net*1, b.barracudacentral.org*1
postscreen_dnsbl_threshold = 2
postscreen_greet_action = enforce
postscreen_greet_wait = ${stress?2}${stress:6}s
and postconf | grep postscreen gives :
postscreen_access_list = permit_mynetworks
postscreen_bare_newline_action = ignore
postscreen_bare_newline_enable = no
postscreen_bare_newline_ttl = 30d
postscreen_blacklist_action = drop
postscreen_blacklist_networks =
postscreen_cache_cleanup_interval = 12h
postscreen_cache_map = btree:$data_directory/postscreen_cache
postscreen_cache_retention_time = 7d
postscreen_client_connection_count_limit = $smtpd_client_connection_count_limit
postscreen_command_count_limit = 20
postscreen_command_filter =
postscreen_command_time_limit = ${stress?10}${stress:300}s
postscreen_disable_vrfy_command = $disable_vrfy_command
postscreen_discard_ehlo_keyword_address_maps =
$smtpd_discard_ehlo_keyword_address_maps
postscreen_discard_ehlo_keywords = $smtpd_discard_ehlo_keywords
postscreen_dnsbl_action = enforce
postscreen_dnsbl_reply_map = texthash:/etc/postfix/dnsbl_reply
postscreen_dnsbl_sites = zen.dnsbl*2, cbl.abuseat.org*2, z.mailspike.net*2,
bl.spamcop.net*1, b.barracudacentral.org*1
postscreen_dnsbl_threshold = 2
postscreen_dnsbl_ttl = 1h
postscreen_enforce_tls = $smtpd_enforce_tls
postscreen_expansion_filter = $smtpd_expansion_filter
postscreen_forbidden_commands = $smtpd_forbidden_commands
postscreen_greet_action = enforce
postscreen_greet_banner = $smtpd_banner
postscreen_greet_ttl = 1d
postscreen_greet_wait = ${stress?2}${stress:6}s
postscreen_helo_required = $smtpd_helo_required
postscreen_non_smtp_command_action = drop
postscreen_non_smtp_command_enable = no
postscreen_non_smtp_command_ttl = 30d
postscreen_pipelining_action = enforce
postscreen_pipelining_enable = no
postscreen_pipelining_ttl = 30d
postscreen_post_queue_limit = $default_process_limit
postscreen_pre_queue_limit = $default_process_limit
postscreen_reject_footer = $smtpd_reject_footer
postscreen_tls_security_level = $smtpd_tls_security_level
postscreen_use_tls = $smtpd_use_tls
postscreen_watchdog_timeout = 10s
postscreen_whitelist_networks = $mynetworks
What's wrong with postscreen_access_list ?
--
Pascal
