* Larry Vaden <va...@texoma.net>:
> Hello postfix-users,
> 
> For a selected time period today, the postfix/postscreen DNSBL rank
> log entries are summarized as:

By which tool?
 
>    1744 DNSBL rank 2
>   12458 DNSBL rank 3
>    5113 DNSBL rank 4
>    1099 DNSBL rank 5
>       1 DNSBL rank 7
> 
> Q1: Given the postscreen invocation in main.cf below the sig, what is
> the meaning of DNSBL rank 7?

Please find the corresponding log line, so we can check this.

> Further, "blocked using" is summarized as follows:
> 
> 54.6% blocked using b.barracudacentral.org;
> 12.1% blocked using bl.spamcop.net;
>  3.8% blocked using spamtrap.trblspam.com;
> 29.5% blocked using zen.spamhaus.org;
> 
> Q2: Is a "blocked using" entry written for each DNSBL for which there
> is a hit?  If not, how is it determined which DNSBL will get credit?

That depends on the tool summarizing the log.

> postscreen_dnsbl_threshold = 2
> postscreen_dnsbl_sites = zen.spamhaus.org*2
>         bl.spamcop.net*1 b.barracudacentral.org*1 spamtrap.trblspam.com*1

That should add up to a maximum of 5 unless a client IP can be listed
multiple times in one dnsbl (?)

-- 
Ralf Hildebrandt
  Geschäftsbereich IT | Abteilung Netzwerk
  Charité - Universitätsmedizin Berlin
  Campus Benjamin Franklin
  Hindenburgdamm 30 | D-12203 Berlin
  Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962
  ralf.hildebra...@charite.de | http://www.charite.de
            

Reply via email to