On 8/9/2017 2:42 μμ, Wietse Venema wrote:
Just as with smtpd access maps, permit/reject are a final decision,
and dunno means 'let something else make the decision'.
Thank you Wietse,
Please let my ask for a clarification here. The problem is that the
rejection seems to have happened by postscreen itself.
I would expect that by using dunno for a client in postscript_exceptions
(as follows):
postscreen_access_list =
permit_mynetworks,
cidr:/etc/postfix/postscreen_exceptions.cidr
all the following postscreen directives would by bypassed for this client:
postscreen_dnsbl_threshold = 2
postscreen_dnsbl_sites =
b.barracudacentral.org*2,
zen.spamhaus.org*2,
psbl.surriel.com*2
postscreen_dnsbl_action = enforce
postscreen_greet_action = enforce
postscreen_blacklist_action = enforce
Isn't this true?
In particular, why the postscreen_access_list did not affect the
postscreen_dnsbl_action, which I would expect to be bypassed?
Can you please explain? Which postscreen actions are affected by
postscreen_access_list?
Sorry if my question is dumb.
Thanks a lot,
Nick
