On 03/08/2022 3:35 pm, Viktor Dukhovni wrote:
Looks sensible. I'd keep these.
On 03.08.22 16:51, Linkcheck wrote:
Despite previously blocking valid emails with dbl?
explicitly allow problematic domains, drop the dbl or find the real culprit.
I notice that the spamhaus solution places all the tests into the
smtpd_recipient_restrictions section, whereas I had them in different
sections plus an extra one - reject_rhsbl_client - in
smtpd_recipient_restrictions.
Will this make a difference? I always understood it didn't matter
which section tests were in as they were all processed at an
appropriate time. Or perhaps I misread/misremembered that?
when those restrictions are used in smtpd_recipient_restrictions, you can
unblock mail for some recipients even if it was blocked by those lists.
allowing mail for postmaster/abuse addresses may be a good idea.
blocking in smtpd_helo_checks makes it impossible to allow particular
senders.
that's why many recommend blocking in the smtpd_recipient_restrictions.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
WinError #99999: Out of error messages.