On 16.10.23 10:33, Ivan Ionut via Postfix-users wrote:
And in my logs I have this example of blocked email(a non-spam one):
blocked using dnsbl-2.uceprotect.net
blocked using spam.dnsbl.anonmails.de
So only two of them, not four. And I want to know if there is a way to
log more information about the threshold for each rejected email(maybe
for each dnsbl_site).
Matus UHLAR - fantomas via Postfix-users:
Note that this can even result into logging DNSWL as reason for blocking, if
e.g. IP hits one DNSWL but multiple DNSBLs. You can use
postscreen_dnsbl_reply_map to map the list into other strings, e.g.
On 16.10.23 10:25, Wietse Venema via Postfix-users wrote:
Are you sure that postscreen will use a whitelist name as the reason
for blocking?
On 16.10.23 17:39, Matus UHLAR - fantomas via Postfix-users wrote:
This happened to me a few years ago, so unless this was changed in
later postfix versions, it will (haven't checked).
I see this was changed in 20120222
Cleanup: when multiple DNSBLs block an SMTP client, the
postscreen "reject" message now gives credit to the DNSBL
with the largest weight, instead of the DNSBL that replies
first. File: postscreen/postscreen_dnsbl.c.
I think this happened to me around April 2017 on Debian 8 with postfix
2.11.3 released 2014/10, so I configured dnsbl map on maintained machines.
Looking at your code again it should behave as expected...
I'll try to find some information about this.
When postscreen accumulates a client score, it remembers not only
the total (score->total), but also the name (score->dnsbl_name) and
weight (score->dnsbl_weight) of the service that made the largest
positive contribution to that score, and uses that name as the
reason for blocking.
if (score->dnsbl_name == 0
|| score->dnsbl_weight < site->weight) {
score->dnsbl_name = head->safe_dnsbl;
score->dnsbl_weight = site->weight;
}
score->total += site->weight;
In the code fragment,
- head->safe_dnsbl is a dnsbl name configured with postscreen_dnsbl_sites
which may be censored with postscreen_dnsbl_reply_map,
- site->weight is a weight configured with postscreen_dnsbl_sites.
--
Matus UHLAR - fantomas, [email protected] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
We are but packets in the Internet of life (userfriendly.org)
_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
