On 02/06/16 17:45, Michael Fox wrote: > If a DNSBL in postscreen_dnsbl_sites has a weight >= > postscreen_dnsbl_threshold, then is there any advantage to also > listing it in smtpd_*_restrictions? For example, is there some failure > mode that having the DNSBL listed in both places would protect > against? Michael
I frequently have remote hosts which pass the pregreet and DNSBL tests, and then repeatedly access the server with a "PASS OLD" result from postscreen. Usually they try to send unauthorised relay messages. The entry in smtpd_*_restrictions would pick these up as their DNSBL status changes. Allen C