On 05/31/2016 08:16 PM, Terry Barnum wrote: > > Since web.com probably has a fleet of mail servers, do I need to find and > enter all their IPs into my postscreen_access.cidr? Is there an easier way? >
That's generally what you have to do. Postscreen is meant to catch the most obvious offenders quickly, so false positives should be rare. Your "grey area" mail should be analyzed by something more time-consuming and configurable (i.e. easier to whitelist). With that in mind, you're putting way too much faith in dnsbl.sorbs.net and hostkarma.junkemailfilter.com. For a reference point, I have the same threshold as you (3) but score them each one point.