Mark Alan:
> > > Would the following be an acceptable way to do it?
> > > postconf -e 'postscreen_access_list = reject'
> > > postconf -e 'soft_bounce = yes'
> >
> > Only if this is documented. The soft_bounce parameter is listed on
> > the postscreen(8) manpage, this is perhaps a sufficient promise to
> > match user expectations and so I would expect it to work.
>
> Sadly it does not.
> Although postscreen marks it as BLACKLISTED, then tlsproxy kicks in and lets
> the email pass:
>
Only because you failed to configure "postscreen_blacklist_action = drop".
Wietse