>This looks similar to my own config, from which I think Steve adapted his. I >presume therefore that you're using a threshold of 3?
Yes. >SWL is no longer active; the zone has been emptied. Check. Thanks. >> reject_rbl_client bl.spamcop.net >> reject_rbl_client psbl.surriel.com > >I would not use those two to reject outright. If you wanted to do that, why not >just increase their postscreen scoring to 3? Thanks. Yes, that was kind of an indirect to my original question. If wanting to reject outright, increase score. >> reject_rbl_client cbl.abuseat.org, > >While there can be occasional slight lag between XBL (part of Zen) and CBL, >that's not significant. You already have this query, in effect, through the Zen >lookup. Check. Will remove. >- Second chance in case of slow DNS response to dnsblog(8) >- Second chance in case a Zen-listed host was on one of your > DNS whitelist queries (these should be rare, and I think the > popular DNSWL services check Zen against their own lists.) > >Disadvantage: >- The tiny time and CPU expenditure of the second, cached lookup > >> Any advise appreciated. > >It really can't hurt to leave it enabled, if it's a DNSBL you considered worthy to >use to block outright. I would, however, advise you to remove the PSBL and >spamcop smtpd restrictions. Wilco. Thanks Rob, much appreciated.
