On 04/10/16 07:02, Sean Greenslade wrote: > On Mon, Oct 03, 2016 at 01:47:28PM -0400, Fongaboo wrote: > I personally don't use RBLs as hard blocks. Instead, I have them set up > in my spam filter (SpamAssassin) with different weights. That way, if > one particular RBL is acting up, I can de-weight it and keep an eye on > it without it affecting delivery.
The main problem with this is that one of the primary advantages to using a DNSRBL is that it sits in front of SpamAssassin. DNSRBL blockign does not require deep inspection of message content so it can be checked first and clients blocked without wasting valuable server resources on anti-spam techniques that do require deep inspection (such as SA). If you're only checking the DNSRBLs from within SA itself then you negate this advantage completely. postscreen can do DNSRBL weighting so that you can require more than one DNSRBL to contain an entry before rejecting messages from a given client. Here's a very good doc on how to properly configure postscreen to do this: http://rob0.nodns4.us/postscreen.html Peter
