RE: Check NS (name or IP) against RBL

[Marius Gologan]

Thank you Wietse and Viktor.

I know check_{sender,helo,client}_{ns,mx}_access files and played a bit with
them, but I already run a granular RBL service.
Unfortunately I'm not winning the game with some type of spam sent
repeatedly during night time using: 
IPs from class B, multiple domains, unique content, no URLs, but common
private name servers (for now).
No bounces, sending is extremely slow, no other RBLs are listing the sources
in due time.

A policy is much better for my scope: keep volume under dynamic limits in a
cache db for the above resources not matching the pattern of large ESPs.

Marius.


-----Original Message-----
From: owner-postfix-us...@postfix.org
[mailto:owner-postfix-us...@postfix.org] On Behalf Of Wietse Venema
Sent: Friday, September 11, 2015 3:52 PM
To: Postfix users
Subject: Re: Check NS (name or IP) against RBL

Marius Gologan:
> Thank you. I will go with central RBL service  and a policy service
script.
> 

FYI, check_sender_ns_access does not require a policy server.

        Wietse
> 
> -----Original Message-----
> From: "Wietse Venema" <wie...@porcupine.org>
> Sent: ?9/?11/?2015 2:15 AM
> To: "postfix-users@postfix.org" <postfix-users@postfix.org>
> Subject: Re: Check NS (name or IP) against RBL
> 
> Viktor Dukhovni:
> > On Fri, Sep 11, 2015 at 12:25:56AM +0300, Marius Gologan wrote:
> > 
> > > Is there any way to check the name server (name and/or IP) of the 
> > > Sender domain against RBL service?
> > 
> > Only via a policy service that does the relevant DNS lookups.
> 
> I have used check_sender_ns_access to block persistent spammers.
> There are also check_sender_mx_access, and similar features for 
> client, helo, recipient.
> 
>       Wietse

smime.p7s
Description: S/MIME cryptographic signature