On Apr 3, 2013, at 16:10, Chad M Stewart <c...@balius.com> wrote:

> Before I go and write my own solution I thought I'd see if anyone knows of an 
> existing solution. 
> 
> Now and again I'd like to put an IP on a local blacklist and have an 
> expiration time set as well.  I'm using postscreen as well and ideally the 
> blacklist will get implemented via postscreen.
> 
> Anyone know of an existing tool that integrates with postfix that would let 
> me do what I want?   I'm open to storing the IP and TTL values in plain text, 
> MySQL, rbldnsd, etc..

We use a home brewed solution that exports IP addresses from a MySQL 
database, younger than X days, to a text file in rbldnsd compatible 
format. This is then rsynced over to the primary relay server, which 
has a local rbldnsd based blacklist, used by postscreen and Postfix.

The new data is automatically picked up by rbldnsd after a few minutes, 
and is live from there on out. Postfix and postscreen don't need to be 
reloaded this way.

Should be easy enough to implement in whatever programming language you 
favour, along with a bit of bash magic to drive the cronjob, rsync 
commands and such.

HTH,
Jona

Reply via email to