Re: postscreen - access list does not appear to be working

2012-05-12 Thread Wietse Venema
Chad M Stewart: > I don't understand why the IP would be whitelisted. I had stopped > postfix, removed the postscreen cache and restarted postfix, thus > no cache and this is the first time the IP has connected. Any > ideas? Wietse: > Because you have still have postscreen_blacklist_action = igno

Re: postscreen - access list does not appear to be working

2012-05-12 Thread Chad M Stewart
On May 12, 2012, at 2:49 PM, Wietse Venema wrote: > Chad M Stewart: >> >> I don't understand why the IP would be whitelisted. I had stopped postfix, >> removed the postscreen cache and restarted postfix, thus no cache and this >> is the first time the IP has connected. Any ideas? > > Because

Re: postscreen - access list does not appear to be working

2012-05-12 Thread Wietse Venema
Chad M Stewart: > > It can be nice to have stupid systems out there that repeatedly connect and > try to deliver junk, I can use for testing new rules. :) I'm trying to test > blacklists in postscreen. From what I read on the postscreen readme, the > following should work to block this IP, bu

Re: postscreen access list

2011-01-26 Thread Benny Pedersen
On Wed, 26 Jan 2011 15:41:43 -0500, Kris Deugau wrote: > Spamhaus actually recommends a non-public local zone for their datafeed; > that way you don't leak the data to other users on your DNS cache, and > you're certain that you are actually using your local copy instead of > the public serv

Re: postscreen access list

2011-01-26 Thread Kris Deugau
Benny Pedersen wrote: someone else wrote: Yes, it's spamhaus but due to the amount of trafic we have our own server (data feed). make it a forward zone in bind so zone name is still same, that way no magic configs does not use local rbldnsd Spamhaus actually recommends a non-public local z

Re: postscreen access list

2011-01-26 Thread Benny Pedersen
> Yes, it's spamhaus but due to the amount of trafic we have our own server > (data feed). make it a forward zone in bind so zone name is still same, that way no magic configs does not use local rbldnsd rbldnsd on 127.0.0.2 then bind still can bind on 127.0.0.1

Re: postscreen access list

2011-01-23 Thread Pascal Maes
Le 22 janv. 2011 à 12:32, Ralph Seichter a écrit : > On 22.01.11 12:12, Pascal Maes wrote: > >> postscreen_acces_list = cidr:/etc/postfix/rules/blacklist, permit_mynetworks > > Use "postscreen_access_list" instead. > > -Ralph I'm really embarrased. I should really replace my glasses. To r

Re: postscreen access list

2011-01-22 Thread Mark Martinec
> postscreen_dnsbl_sites = zen.dnsbl*2 ??? You mean zen.spamhaus.org Mark

Re: postscreen access list

2011-01-22 Thread Ralph Seichter
On 22.01.11 12:12, Pascal Maes wrote: > postscreen_acces_list = cidr:/etc/postfix/rules/blacklist, permit_mynetworks Use "postscreen_access_list" instead. -Ralph