On 8/15/2013 2:30 AM, Grant wrote:
>>>>> A few people have told me they received an email error message after
>>>>> emailing me.  I'm trying to get a copy of one of the error emails,
>>>>> but I can't imagine what would cause that besides possibly my
>>>>> greylisting.  Has greylisting been known to lead to email error
>>>>> messages being sent to senders in some instances?
>>>>
>>>> The sender may receive an error if their server has an unusual
>>>> setup. Such servers must be whitelisted in your greylist software.
>>>
>>> The last sender who told me about the error message was on a
>>> comcast.net address.
>>
>> Comcast (nor any major provider) should be greylisted.  Any
>> reasonable greylist software should have a setting to whitelist
>> well-known mail servers.
> 
> So I'm sure I understand, well-known mail servers should be whitelisted?

well-known mail servers should be whitelisted in greylist software.
 You can ignore this with postscreen and postfix 2.11+.


>> Postfix 2.11 (currently in development snapshots) includes a
>> wonderful feature to bypass postscreen tests for clients listed in
>> dns whitelists, such as list.dnswl.org, greatly reducing unnecessary
>> tests.
> 
> I'm actually using postfix-2.11_pre20130710.  Can you point me in the
> right direction for setting up the DNS whitelist interaction?  Should
> that (for example) prevent comcast.net users from receiving 450 error
> email notices?

Excellent!

Use a dns white list with a negative score in the
postscreen_dnsbl_sites, and set a negative value for
postscreen_dnsbl_whitelist_threshold.  Simple example:
# main.cf
postscreen_dnsbl_sites = zen.spamhaus.org list.dnswl.org*-1
postscreen_dnsbl_whitelist_threshold = -1

See the RELEASE_NOTES and POSTSCREEN_README for details.


  -- Noel Jones

Reply via email to