The postscreen feature for RBL checks allows us to use scoring!

My configuration is based on this one here:
https://gitlab.com/noumenia/aetolos/-/blob/master/modules/el8/postfix/maincf.tpl

Take a look at lines 100 to 132.


For example:

postscreen_dnsbl_action = enforce   (reject email with 550)
postscreen_dnsbl_threshold = 3      (once they reach a total score of 3)
postscreen_dnsbl_sites =
        blacklist.a*3               (always reject)
        blacklist.b*3               (always reject)
        blacklist.c*2
        blacklist.d*2
        blacklist.e*1
        blacklist.f*1

The above runs the blacklists and if they HIT, their score after the asterisk 
(*) is added to the total. For example, if the blacklist.f is a HIT the total 
score is 1, if the blacklist.d is also a HIT then 1+2=3 so with a total score 
of 3 the email is rejected.

This allows for multiple LOW scoring blacklists to reject an email, while the 
HIGH score blacklists will have a more immediate effect.



On Sat, 29 Apr 2023 00:15:41 +0000 Ken Peng via Postfix-users 
<[email protected]> wrote:

> Sorry i have a question to postscreen.
> I saw many people use postscreen for RBL checks.
> But postfix itself have the RBL checks already:
> 
> smtpd_recipient_restrictions =
>    ...
>    reject_rbl_client zen.spamhaus.org,
>    reject_rbl_client bl.spamcop.net
> 
> 
> So what's the difference between them?
> 
> Regards.
_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to