Re: general question to postscreen

2011-06-18 Thread Victor Duchovni
On Sat, Jun 18, 2011 at 11:27:02PM -0500, /dev/rob0 wrote: > Soon I will be putting up a web page with slides and notes for my > postscreen talk at Southeast (USA) LinuxFest. In the meantime, you > can see what I have posted about my postscreen config here: > http://permalink.gmane.org/gmane

Re: general question to postscreen

2011-06-18 Thread /dev/rob0
On Fri, Jun 17, 2011 at 10:46:53PM +0200, m...@smtp.fakessh.eu wrote: > postscreen_dnsbl_sites = cbl.abuseat.org*2, bl.spamcop.net*1, > b.barracudacentral.org*2 ,zen.spamhaus.org*3 ,sbl.spamhaus.org*2, > xbl.spamhaus.org*2 > postscreen_dnsbl_threshold = 2 You have no fewer than four useless looku

Re: general question to postscreen

2011-06-17 Thread Wietse Venema
m...@smtp.fakessh.eu: > Le vendredi 17 juin 2011 21:54, Victor Duchovni a ?crit?: > > On Fri, Jun 17, 2011 at 09:44:00PM +0200, m...@smtp.fakessh.eu wrote: > > > Le vendredi 17 juin 2011 21:39, Victor Duchovni a ?crit?: > > > > In that case you've over-engineered your configuration as was my guess.

Re: general question to postscreen

2011-06-17 Thread m...@smtp.fakessh.eu
Le vendredi 17 juin 2011 21:54, Victor Duchovni a écrit : > On Fri, Jun 17, 2011 at 09:44:00PM +0200, m...@smtp.fakessh.eu wrote: > > Le vendredi 17 juin 2011 21:39, Victor Duchovni a ?crit?: > > > In that case you've over-engineered your configuration as was my guess. > > > Now you need to constru

Re: general question to postscreen

2011-06-17 Thread Victor Duchovni
On Fri, Jun 17, 2011 at 09:44:00PM +0200, m...@smtp.fakessh.eu wrote: > Le vendredi 17 juin 2011 21:39, Victor Duchovni a ?crit?: > > In that case you've over-engineered your configuration as was my guess. > > Now you need to construct something more restrained. > So I understand > > how to buil

Re: general question to postscreen

2011-06-17 Thread m...@smtp.fakessh.eu
Le vendredi 17 juin 2011 21:39, Victor Duchovni a écrit : > In that case you've over-engineered your configuration as was my guess. > Now you need to construct something more restrained. So I understand how to build something cleaner --  http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x0921

Re: general question to postscreen

2011-06-17 Thread Victor Duchovni
On Fri, Jun 17, 2011 at 09:32:15PM +0200, m...@smtp.fakessh.eu wrote: > Le vendredi 17 juin 2011 20:44, Wietse Venema a ?crit?: > > > That is not "postconf -n" output. There are too many lines of output. > I assure you this is my exit. On Fri, Jun 17, 2011 at 02:54:51PM -0400, Victor Duchovni wro

Re: general question to postscreen

2011-06-17 Thread m...@smtp.fakessh.eu
Le vendredi 17 juin 2011 20:54, Victor Duchovni a écrit : > On Fri, Jun 17, 2011 at 02:44:52PM -0400, Wietse Venema wrote: > > > r13151 ~]# postconf -n | egrep postscreen > > > > That is not "postconf -n" output. There are too many lines of output. > > Or the OP tweaked or cloned default values of

Re: general question to postscreen

2011-06-17 Thread m...@smtp.fakessh.eu
Le vendredi 17 juin 2011 20:44, Wietse Venema a écrit : > That is not "postconf -n" output. There are too many lines of output. I assure you this is my exit. [root@r13151 ~]# postconf -n | egrep postscreen postscreen_access_list = permit_mynetworks postscreen_bare_newline_action = ignore postscree

Re: general question to postscreen

2011-06-17 Thread Victor Duchovni
On Fri, Jun 17, 2011 at 02:44:52PM -0400, Wietse Venema wrote: > > r13151 ~]# postconf -n | egrep postscreen > > That is not "postconf -n" output. There are too many lines of output. Or the OP tweaked or cloned default values of too many parameters. If the OP posts a more modest set of non-defau

Re: general question to postscreen

2011-06-17 Thread Wietse Venema
m...@smtp.fakessh.eu: Checking application/pgp-signature: FAILURE -- Start of PGP signed section. [ Charset ISO-8859-1 unsupported, converting... ] > hi folks > hi Wietse > hi mouss > > > are you ready ? > > This is a general question on improvements to a standard config postscreen > with