On Apr 3, 2013, at 16:10, Chad M Stewart <c...@balius.com> wrote: > Before I go and write my own solution I thought I'd see if anyone knows of an > existing solution. > > Now and again I'd like to put an IP on a local blacklist and have an > expiration time set as well. I'm using postscreen as well and ideally the > blacklist will get implemented via postscreen. > > Anyone know of an existing tool that integrates with postfix that would let > me do what I want? I'm open to storing the IP and TTL values in plain text, > MySQL, rbldnsd, etc..
We use a home brewed solution that exports IP addresses from a MySQL database, younger than X days, to a text file in rbldnsd compatible format. This is then rsynced over to the primary relay server, which has a local rbldnsd based blacklist, used by postscreen and Postfix. The new data is automatically picked up by rbldnsd after a few minutes, and is live from there on out. Postfix and postscreen don't need to be reloaded this way. Should be easy enough to implement in whatever programming language you favour, along with a bit of bash magic to drive the cronjob, rsync commands and such. HTH, Jona