On 3/16/2011 10:11 PM, Fernando Maior wrote:
On Wed, Mar 16, 2011 at 11:39 PM, Wietse Venema <[email protected] <mailto:[email protected]>> wrote:Fernando Maior: > What is not clear for me is: do I need to change my main.cf <http://main.cf> in order to run > postscreen and do not duplicate its functionality in postfix? See: http://www.postfix.org/POSTSCREEN_README.html#intro http://www.postfix.org/POSTSCREEN_README.html#config Wietse Thank you, Wietse, I already read fully the document quoted. Only my question is not about that, but is about features that are duplicated on postscreen and postfix, as I understood. Postscreen used DNSBL and postfix can do it, either. So, my question is if I configure postscreen to use DNSBL, may I remove the lines for DNSBL checking on main.cf <http://main.cf> for postfix? I understand enabling that on both postscreen and postfix is doing the same thing twice... Am I wrong? Many thanks! Fernando Maior
DNSBL checks can be removed from postfix main.cf if you do the same checks in postscreen. No need to do the same checks twice. RHSBL (domain name) checks will still need to be done in main.cf.
It seems to me that smtpd_hard_error_limit, smtpd_helo_required and other configs may just be removed from main.cf,
The settings you mention have no direct equivalent in postscreen.
soft_bounce = yes
That setting is for testing only and likely to greatly increase nuisance traffic if used in production. Remove it.
maximum_queue_lifetime = 2h
Why so short? You don't like to deliver mail?
default_destination_concurrency_limit = 50
Why so high? You trying to get blacklisted? -- Noel Jones
