On 05/01/2012 03:42 PM, Postfix Support Mail wrote: > Sorry about that. > > Reading the postscreen readme is what spawned the question. >
If you enable the deep protocol tests, postscreen works pretty much like greylisting since it will 4xx any client that passes. When they reconnect, they skip postscreen entirely; in effect, they've passed greylisting. Postgrey is a little more configurable (re: greylisting), and its introduction is less intrusive than switching will be. If you have to support older versions of postfix (sans postscreen), it also allows you to consolidate your configurations. On the other hand, I trust the postscreen code to be of the same quality as the rest of postfix. Postscreen does provide some additional anti-spam measures and reduces the load on your system. Finally, when all's said and done, you've got one less[1] moving part to worry about. Perhaps my favorite benefit is that with postscreen, we can afford the resources to use a pre-queue content filter. Now senders get a rejection if we e.g. detect a virus in their message. This greatly reduces the amount of time I have to spend on the phone. I would recommend switching eventually. [1] Technically there are probably more, but let's say "logical" moving parts.