Mayhem: > postscreen_dnsbl_max_ttl : > > The maximum amount of time that postscreen(8) will use the result from a > successful DNS-based reputation test before a client IP address is required > to pass that test again.
Postscreen requires that a remote SMTP client PASS zero or more TESTs before it is allowed to talk to a Postfix SMTP server. One TEST is PREGREET One TEST is DNSBL The result of a TEST is PASS or FAIL. After a successful DNSBL TEST (i.e. PASS), postscreen_dnsbl_max_ttl determines when the client must PASS the TEST again. Postscreen does not cache FAIL results. That would be a stupid idea: the vast majority of IP addresses should not send email directly across the Internet, and spambots are short-lived. Wietse