thanks i had permit and dont work noi use PERMIT and work corretly
************************************************************************************************* Este mensaje y todos los archivos adjuntos son confidenciales y de uso exclusivo por parte de su/sus destinatario/s. Si usted ha recibido este mensaje por error, le agradecemos que lo notifique inmediatamente al remitente y destruya el mensaje. Queda prohibida cualquier modificación, edición, uso o divulgación no autorizados. El Emisor no se hace responsable de este mensaje si ha sido modificado, distorsionado, falsificado, infectado por un virus o editado o difundido sin autorización. *********************************************************************************************** This message and any attachments are confidential and intended for the named addressee(s) only. If you have received this message in error, please notify immediately the sender, then delete the message. Any unauthorized modification, edition, use or dissemination is prohibited. The sender shall not be liable for this message if it has been modified, altered, falsified, infected by a virus or even edited or disseminated without authorization. *********************************************************************************************** El 04/03/2019 a las 11:29, Dominic Raferd escribió:
You could build a cidr file (say /etc/postfix/postscreen_access.cidr)
to whitelist gmail servers with the output from:
dig +short _spf.google.com TXT|awk '{for (f=1; f<=NF; f++) {if
(substr($f,1,8)=="include:") print substr($f,9)}}'|xargs -I {} dig
+short {} TXT|awk '{for (f=1; f<=NF;f++) {if (substr($f,1,4)=="ip4:")
print substr($f,5)" PERMIT"}}'
(sorry for any line breaks, this is plain text mail)
and then use something like this:
postscreen_access_list = cidr:/etc/postfix/postscreen_access.cidr
But it seems to me that if your dnsbl settings are blocking all gmail
you should fix your dnsbl settings rather than use a sticking plaster.
Your present settings look too aggressive, and you don't seem to be
using zen.spamhaus.org which IMO is the best (and some people think is
the only one worth bothering with).
smime.p7s
Description: Firma criptográfica S/MIME
