li...@sbt.net.au: > is this correct place for rbls, after 'unauth_dest' and before 'greylist' ?
Generally, yes, because DNS lookups take time, and check_policy_service can be the most resource intensive, so they should be done after the quick rejects such as reject_unauth_destination. > reject_unauth_destination, > reject_rbl_client zen.spamhaus.org, > reject_rhsbl_client dbl.spamhaus.org, > reject_rhsbl_sender dbl.spamhaus.org, > reject_rbl_client psbl.surriel.com, > reject_rbl_client bl.spamcop.net, > reject_rhsbl_sender dsn.rfc-ignorant.org, > check_policy_service inet:127.0.0.1:10031 Wietse