On 1/6/2012 3:05 AM, Eric Lemings wrote: > [root@myhost postfix]$ dig 2.0.0.127.zen.spamhaus.org. any ... > ;; ANSWER SECTION: > 2.0.0.127.zen.spamhaus.org. 900 IN A 127.0.0.2 > 2.0.0.127.zen.spamhaus.org. 900 IN A 127.0.0.10 > 2.0.0.127.zen.spamhaus.org. 900 IN A 127.0.0.4 > 2.0.0.127.zen.spamhaus.org. 900 IN TXT > "http://www.spamhaus.org/SBL/sbl.lasso?query=SBL233" > 2.0.0.127.zen.spamhaus.org. 900 IN TXT > "http://www.spamhaus.org/query/bl?ip=127.0.0.2"
This means your queries should be working. > It seems the new spam control measures in my Postfix configuration may > actually be working now. The quantity has tapered off significantly after > the initial flood of spam which may have been queued up retries I'm guessing. Bot spam engines never retry failed deliveries, and greylisting relies on this fact to block bot spam. Most snowshoe spammer hosts don't retry either, by design. Considering you just consolidated everything under smtpd_recipient_restrictions, you should share "postconf -n" output again so we can sanity check it. Restriction order can be important, sometimes critical. -- Stan