It would be easier to distinguish your question if you quoted the message
you are replying to...
On 02.03.23 16:23, Alberto wrote:
Thank you Wietse, I already have Postscreen, and blocks many attacks,
however, there are still a large amount that pass, and are managed by
Postfix, having as common approach, an incorrect hostname in the "helo".
Many senders are mis-configured, it's true, perhaps I'll set to "yes" again,
some time.
Best Regards,
In addition, I have configured PostScreen with the following RBLs and
weights:
postscreen_dnsbl_threshold = 6
postscreen_dnsbl_whitelist_threshold = -2
postscreen_dnsbl_sites =
swl.spamhaus.org*-4
list.dnswl.org=127.[0..255].[0..255].0*-2
list.dnswl.org=127.[0..255].[0..255].1*-4
list.dnswl.org=127.[0..255].[0..255].[2..255]*-6
zen.spamhaus.org*3
bl.spamcop.net*2
you can never reach threshold of 6 here.
but any listing in dnswl may (and swl.spamhaus will) make postscreen to skip
other (not just dns) tests. I woouldn't trust either that much.
I use this setting:
postscreen_dnsbl_threshold=2
postscreen_dnsbl_sites =
zen.spamhaus.org=127.0.0.[0..255],
dnsbl.sorbs.net=127.0.0.[0..255],
bl.spamcop.net=127.0.0.2,
list.dnswl.org=127.0.[0..255].[0..255]*-1,
list.dnswl.org=127.0.[0..255].3*-1
so, dnswl listing will override max two blocklists, and dnswl "high" will
override three.
I could play with scores probably (e.g. multiply with 2, spamhaus with 3).
--
Matus UHLAR - fantomas, [email protected] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Nothing is fool-proof to a talented fool.
