s.sm...@gmx.ch: > Hi, > > We experience problems when using reject_rbl_client if a wildcard entry for > mydomain exists. It appears that a DNS lookup is first made with [ip].[rbl] > and than with [ip].[rbl].[mydomain] if no entry has been found. > This leads to false positives if a DNS wildcard entry for xxx.[mydomain] > exists.
Postfix does not enable RES_DNSRCH or RES_DEFNAMES for DNSBL lookups. I suspect that you have some too-helpful DNS proxy. Wietse