On Wed, Feb 22, 2012 at 04:08:01PM -0500, Wietse Venema wrote: > I have changed postscreen DNSBL "reject" logging, so that it now > gives credit to the DNSBL with the largest weight, instead of the > DNSBL that replies first. I think that the result resembles more > what some people expected to see.
Agreed, this was confusing for me at first, and my workaround was a pcre postscreen_dnsbl_reply_map. Is this in 2.10 Snapshot 20120218? > Before: > > dnsblog[75702]: addr 124.42.204.113 listed by domain b.barracudacentral.org > as 127.0.0.2 > dnsblog[75702]: addr 124.42.204.113 listed by domain zen.spamhaus.org as > 127.0.0.4 > postscreen[75699]: DNSBL rank 3 for [124.42.204.113]:3566 > postscreen[75699]: NOQUEUE: reject: RCPT from [124.42.204.113]:3566: 550 > 5.7.1 Service unavailable; client [124.42.204.113] blocked using > b.barracudacentral.org; ... > > After: > > dnsblog[99956]: addr 124.42.204.113 listed by domain b.barracudacentral.org > as 127.0.0.2 > dnsblog[99937]: addr 124.42.204.113 listed by domain zen.spamhaus.org as > 127.0.0.4 > postscreen[99920]: DNSBL rank 3 for [124.42.204.113]:2446 > postscreen[99920]: NOQUEUE: reject: RCPT from [124.42.204.113]:2446: 550 > 5.7.1 Service unavailable; client [124.42.204.113] blocked using > zen.spamhaus.org; ... -- http://rob0.nodns4.us/ -- system administration and consulting Offlist GMX mail is seen only if "/dev/rob0" is in the Subject: