On Wed, 14 May 2014 10:09:19 -0500 Noel Jones <njo...@megan.vbhcs.org> wrote: > On 5/14/2014 9:59 AM, D'Arcy J.M. Cain wrote: > > It looks like hotmail is on two DNSBLs and postscreen is blocking > > them. I would like to offer my users a way to whitelist individual > > addresses but it looks like I can only whitelist CIDR blocks. Is > > that the case or do I have another option? > > The only postscreen whitelisting possible is by IP. Postscreen will > never (and cannot) see a hostname nor an email address.
Yah, that's what I was afraid of. > Your choices are: > - remove the offending DNSBL. Postscreen is not appropriate for a > DNSBL that intentionally lists hosts sending a mixture of good and > bad mail, such as hotmail, AOL, etc. I know that SORBS, one of the listing DNSBLs, shouldn't be used but in my case it is spamcop that is blocking the mails. I thought that they were generally considered a good source. > - move the offending DNSBL to the regular smtpd_*_access checks, > where whitelisting is possible. Sounds like my best option here. -- D'Arcy J.M. Cain System Administrator, Vex.Net http://www.Vex.Net/ IM:da...@vex.net VoIP: sip:da...@vex.net