On 12/10/2017 11:49 AM, Colony.three wrote:
*
http://www.postfix.org/POSTSCREEN_README.html
with that config and postscreen properly configured you block far more
than 90% of junk without risk false positives
postscreen_dnsbl_threshold = 8
postscreen_dnsbl_action = enforce
postscreen_greet_action = enforce
postscreen_dnsbl_sites =
dnsbl.sorbs.net=127.0.0.10/9
dnsbl.sorbs.net=127.0.0.14/9
zen.spamhaus.org=127.0.0.[10;11]/8
dnsbl.sorbs.net=127.0.0.5/7
zen.spamhaus.org=127.0.0.[4..7]/7
b.barracudacentral.org=127.0.0.2/7
zen.spamhaus.org=127.0.0.3/7
dnsbl.inps.de=127.0.0.2/7
hostkarma.junkemailfilter.com=127.0.0.2/4
dnsbl.sorbs.net=127.0.0.7/4
bl.spamcop.net=127.0.0.2/4
bl.spameatingmonkey.net=127.0.0.[2;3]/4
dnsrbl.swinog.ch=127.0.0.3/4
ix.dnsbl.manitu.net=127.0.0.2/4
psbl.surriel.com=127.0.0.2/4
bl.mailspike.net=127.0.0.[10;11;12]/4
bl.mailspike.net=127.0.0.2/4
zen.spamhaus.org=127.0.0.2/3
score.senderscore.com=127.0.4.[0..20]/3
bl.spamcannibal.org=127.0.0.2/3
dnsbl.sorbs.net=127.0.0.6/3
dnsbl.sorbs.net=127.0.0.8/2
hostkarma.junkemailfilter.com=127.0.0.4/2
dnsbl.sorbs.net=127.0.0.9/2
dnsbl-1.uceprotect.net=127.0.0.2/2
all.spamrats.com=127.0.0.38/2
bl.nszones.com=127.0.0.[2;3]/1
dnsbl-2.uceprotect.net=127.0.0.2/1
dnsbl.sorbs.net=127.0.0.2/1
dnsbl.sorbs.net=127.0.0.4/1
score.senderscore.com=127.0.4.[0..69]/1
dnsbl.sorbs.net=127.0.0.3/1
hostkarma.junkemailfilter.com=127.0.1.2/1
dnsbl.sorbs.net=127.0.0.15/1
ips.backscatterer.org=127.0.0.2/1
bl.nszones.com=127.0.0.5/-1
score.senderscore.com=127.0.4.[90..100]/-1
wl.mailspike.net=127.0.0.[18;19;20]/-2
hostkarma.junkemailfilter.com=127.0.0.1*-2
ips.whitelisted.org=127.0.0.2*-2
list.dnswl.org=127.0.[0..255].0*-2
dnswl.inps.de=127.0.[0;1].[2..10]/-2
list.dnswl.org=127.0.[0..255].1/-3
list.dnswl.org=127.0.[0..255].2*-4
list.dnswl.org=127.0.[0..255].3*-5
Now that I've had a chance to study this, and despite our history, I'd
like to thank you Harald, for this useful information. I am sure that a
number of other present are grateful too.
This will bring peace to many an Inbox.
Postwhite goes perfectly with the above postscreen weighted RBLs to
reduce FPs down to zero:
https://github.com/stevejenkins/postwhite
You will want to setup the special Yahoo exclusions and add any other
major/trusted senders (ex. authsmtp.com) based on their SPF record.
--
David Jones
