On 03/08/2022 3:35 pm, Viktor Dukhovni wrote:
Looks sensible.  I'd keep these.

On 03.08.22 16:51, Linkcheck wrote:
Despite previously blocking valid emails with dbl?

explicitly allow problematic domains, drop the dbl or find the real culprit.

I notice that the spamhaus solution places all the tests into the smtpd_recipient_restrictions section, whereas I had them in different sections plus an extra one - reject_rhsbl_client - in smtpd_recipient_restrictions.

Will this make a difference? I always understood it didn't matter which section tests were in as they were all processed at an appropriate time. Or perhaps I misread/misremembered that?

when those restrictions are used in smtpd_recipient_restrictions, you can unblock mail for some recipients even if it was blocked by those lists.

allowing mail for postmaster/abuse addresses may be a good idea.

blocking in smtpd_helo_checks makes it impossible to allow particular senders.

that's why many recommend blocking in the smtpd_recipient_restrictions.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
WinError #99999: Out of error messages.

Reply via email to