On 5/14/2014 9:59 AM, D'Arcy J.M. Cain wrote: > It looks like hotmail is on two DNSBLs and postscreen is blocking > them. I would like to offer my users a way to whitelist individual > addresses but it looks like I can only whitelist CIDR blocks. Is > that the case or do I have another option? > > Cheers. >
The only postscreen whitelisting possible is by IP. Postscreen will never (and cannot) see a hostname nor an email address. Your choices are: - remove the offending DNSBL. Postscreen is not appropriate for a DNSBL that intentionally lists hosts sending a mixture of good and bad mail, such as hotmail, AOL, etc. - move the offending DNSBL to the regular smtpd_*_access checks, where whitelisting is possible. - Use a DNSWL and adjust your scores so the offending DNSBL doesn't reject real servers. -- Noel Jones
