Re: DNSBL/DNSWL lookup table

2014-06-09 Thread Wietse Venema
johnea: > Hello Wietse, > > Is it possible to use this to DNSBL check URLs present in the body of an > email? (pre-queue) As described in my posting, the dnxsl query is an IP address, a domain name, or an email address. So the answer is "yes" when your email contains only lines of text with exa

Re: DNSBL/DNSWL lookup table

2014-06-09 Thread Wietse Venema
Kai Krakow: > >> smtpd_client_event_limit_exceptions = dnsxl:xbl.spamhaus.org > > > > Except that this does not block AUTH commands. Currently all that > > smtpd_client_event_limit_exceptions does is not announce AUTH support > > in the EHLO response. > > Hey thanks, I love the potential of t

Re: DNSBL/DNSWL lookup table

2014-06-09 Thread li...@rhsoft.net
Am 09.06.2014 22:17, schrieb johnea: > On 06/09/2014 11:48 AM, Wietse Venema wrote: >> Wietse Venema: >>> By itself, dnsxl maps may be useful in contexts that perform "list >>> membership" lookup such as smtpd_client_event_limit_exceptions, >>> where the lookup result value is ignored, For exampl

Re: DNSBL/DNSWL lookup table

2014-06-09 Thread johnea
On 06/09/2014 11:48 AM, Wietse Venema wrote: > Wietse Venema: >> By itself, dnsxl maps may be useful in contexts that perform "list >> membership" lookup such as smtpd_client_event_limit_exceptions, >> where the lookup result value is ignored, For example, to prevent >> password brute-forcing from

Re: DNSBL/DNSWL lookup table

2014-06-09 Thread Kai Krakow
Wietse Venema schrieb: > Wietse Venema: >> By itself, dnsxl maps may be useful in contexts that perform "list >> membership" lookup such as smtpd_client_event_limit_exceptions, >> where the lookup result value is ignored, For example, to prevent >> password brute-forcing from bot-infected systems

Re: DNSBL/DNSWL lookup table

2014-06-09 Thread Wietse Venema
Wietse Venema: > By itself, dnsxl maps may be useful in contexts that perform "list > membership" lookup such as smtpd_client_event_limit_exceptions, > where the lookup result value is ignored, For example, to prevent > password brute-forcing from bot-infected systems: > > smtpd_client_event_l

DNSBL/DNSWL lookup table

2014-06-09 Thread Wietse Venema
Wietse Venema: > I could rip out the DNSBL client code from the Postfix SMTP daemon > source code and make it available as 1) a lookup table to all programs > 2) a library module that implements the underlying DNS client code. I played with this idea over the weekend while taking breaks from chore