>From: Benny Pedersen <m...@junc.eu> >Sent: Friday, March 27, 2015 10:48 PM >To: users@spamassassin.apache.org >Subject: Re: Uptick in spam
>David Jones skrev den 2015-03-28 03:13: >> I have Spamhaus in >> front of invaluement in >> my postfix configuration but I may try flipping the order just to see >> if it will start blocking more >> than Spamhaus. >with postfix posttscreen one can test all ips on all rbls in same single >smtpd client check, so there is no just spamhaus here :-) I know that but I choose to use the "traditional" method in the Postfix smtpd_recipient_restrictions so I can specify the order. I have such a high volume of mail for more than 100,000 mailboxes, I want to check in a specific order using my local rbldnsd feed to prevent abuse of other RBLs further down the list. If this were my personal mail filtering then I would use postscreen the same way you do. >despite its called dnsbl in postscreen it supports whitelist aswell >for me i have keeped all rbl checks from spamassassin into postscreen, i >know there is more rbl lists i could add, but for me there is no need >to, to many quererys makes to much dns trafic without more usefull data, >and to make it more stable its nice that postscreen cache results on >positive hits a little longer then ttl in dns It still makes sense to keep some reliable RBL checks in SA to catch outbound spam from authenticated users. You do want to filter outbound mail to keep your mail servers off of RBLs from compromised accounts. I use a few custom rules to subtract a little from outbound mail but it's not completely trusted.
