On Fri, Aug 26, 2016 at 10:31:20PM +0300, Aggelos wrote: > So any OK (or permit) is not final until all restriction stages are > checked, right?
A permit (or reject) action is final IN THAT STAGE. It ends processing of any further restrictions, e.g., in your smtpd_client_restrictions stage, and moves on to the next set of restrictions (if appropriate). > Does this also apply for any REJECT or DEFER ? Reject actions are like permit actions; they end the processing of restrictions in that stage. Defer actions are a special case; processing will continue in case a reject action is reached. On Fri, Aug 26, 2016 at 11:17:31PM +0300, Aggelos wrote: > On 26/08/2016 04:34 μμ, /dev/rob0 wrote: > > >Some of your DNSBLs have been gone for many years. At least one > >(spamcop) is best for scoring; not safe for outright blocking of > >mail. > > > Shouldn't I keep at least one of these DNSBLs, like > zen.spamhaus.org ? I definitely recommend using Zen. You might also be interested in postscreen, see: http://www.postfix.org/POSTSCREEN_README.html and my own config example here: http://rob0.nodns4.us/postscreen.html -- http://rob0.nodns4.us/ Offlist GMX mail is seen only if "/dev/rob0" is in the Subject:
