On 2/10/2014 9:09 PM, Noel Jones wrote:
On 2/10/2014 9:45 PM, Michael McCallister wrote:
On 2/10/2014 7:43 PM, Wietse Venema wrote:
Michael McCallister:
Hi,
Does postscreen_dnsbl_ttl apply to nxdomain responses as well? For
example, lets assume an IP lookup on zen.spamhaus.org returns
nxdomain
and postscreen_dnsbl_ttl is set to an hour - postscreen won't check
again for another hour? Or does that caching only apply to
non-nxdomain
responses.
postscreen_dnsbl_ttl (default: 1h)
The amount of time that postscreen(8) will use the result
from a suc-
cessful DNS blocklist test. During this time, the client IP
address is
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
excluded from this test.
^^^^^^^^^^^^^^^^^^^^^^^^^^^
Wietse
Right - but that does not answer my question. My question is if a
nxdomain result is considered a "successful DNS blocklist test".
Yes.
Thanks guys!
