chr[]:
> On 24.03.25 14:05, Wietse Venema via Postfix-users wrote:
> > Christoph Rudorff via Postfix-users:
> >> Hello list,
> >>
> >> yes, I ran into the problem, that Spamhaus stopped supporting public DNS
> >> resolvers:
> >>
> >> Service unavailable; Client host [xxxx::] blocked using zen.spamhaus.org;
> >> Error: open resolver;
> >
> > That is not new. Their free service does not allow queries from
> > open resolvers (or other sources that would exceed the free limit).
> >
> >> Please update the documentation [1] about smtpd_recipient_restrictions:
> >>
> >> reject_rbl_client zen.spamhaus.org=127.0.0.[2..11]
> >> ... etc
> >> [2]
> >>
> >> and drop a bold warning not to use a public DNS!
> >
> > I can add a note,
> >
> > For email servers, it has always been best practice to run a local
> > resolver that queries the internet directly, instead of a resolver
> > that forwards queries to some ISP and that targets consumer devices.
> >
> > Wietse
>
> Yes, that is not new.
>
> Well, just to sum it up:
>
> The documentation is outdated
> and a bad example is a danger.
> It's actually a goto hell.
Too late! I have already updated the documentation (on www.porcupine.org;
mirrrors will pick it up in the next hour or so).
Wietse
_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
