I've recently updated Postfix from 2.1, and, enabled postscreen, all's working well, though, just picked up a false positive:
several users inbound mail blocked with dnsbl.spfbl.net I have like: # grep spfbl.net main.cf postscreen_dnsbl_sites = zen.spamhaus.org*5, psbl.surriel.com*2, bl.spamcop.net*2, dnsbl.spfbl.net*2, as this is a gov.au server, should I whitelist health.gov.au ? or sge.net ? how/where ? what's the best way to prevent emails from health.gov.au/sge.net being blocked? # grep health.gov.au /var/log/maillog | grep block May 21 08:49:16 geko postfix/postscreen[23877]: NOQUEUE: reject: RCPT from [152.91.65.145]:57512: 550 5.7.1 Service unavailable; client [152.91.65.145] blocked using dnsbl.spfbl.net; from=<vijawathy.mcpher...@health.gov.au>, to=<br...@tld.com.au>, proto=ESMTP, helo=<orland.sge.net> May 21 16:55:53 geko postfix/postscreen[5875]: NOQUEUE: reject: RCPT from [152.91.65.145]:42388: 550 5.7.1 Service unavailable; client [152.91.65.145] blocked using dnsbl.spfbl.net; from=<prosthe...@health.gov.au>, to=<ka...@tld.com.au>, proto=ESMTP, helo=<orland.sge.net> May 22 15:54:50 geko postfix/postscreen[22598]: NOQUEUE: reject: RCPT from [152.91.65.145]:54437: 550 5.7.1 Service unavailable; client [152.91.65.145] blocked using dnsbl.spfbl.net; from=<euan.mil...@health.gov.au>, to=<br...@tld.com.au>, proto=ESMTP, helo=<orland.sge.net> May 24 09:25:55 geko postfix/postscreen[803]: NOQUEUE: reject: RCPT from [152.91.65.146]:58463: 550 5.7.1 Service unavailable; client [152.91.65.146] blocked using dnsbl.spfbl.net; from=<accounts...@health.gov.au>, to=<d...@tld.com.au>, proto=ESMTP, helo=<oxford.sge.net>