Re: Postscreen and exceptions

2013-01-07 Thread Benny Pedersen
Noel Jones skrev den 2013-01-06 19:40: Clearly the current, vastly improved, false positive rate is still not acceptable for everyone. http://www.dnswl.org/tech see more on permit_dnswl_client it does not need to be specific dnswl.org as dnsbl/dnswl, its just an good example on postfix

Re: Postscreen and exceptions

2013-01-06 Thread Jos Chrispijn
Wietse Venema: Don't use spamcop, or use it only with small weight in a scoring system. Wietse What is your concern about Spamcop? Happy to learn, Jos

Re: Postscreen and exceptions

2013-01-06 Thread Wietse Venema
Jos Chrispijn: Wietse Venema: Don't use spamcop, or use it only with small weight in a scoring system. Wietse What is your concern about Spamcop? Read their blocklist policy. I use it, thusly: postscreen_dnsbl_sites = zen.spamhaus.org*2 bl.spamcop.net*1

Re: Postscreen and exceptions

2013-01-06 Thread John Levine
Don't use spamcop, or use it only with small weight in a scoring system. I agree that Spamcop used to be awful, with vast numbers of false alarms. But since Ironport bought them several years ago, there's been a nearly complete turnover of staff and it's much better run. Take another look. I

Re: Postscreen and exceptions

2013-01-06 Thread Noel Jones
On 1/6/2013 11:29 AM, John Levine wrote: Don't use spamcop, or use it only with small weight in a scoring system. I agree that Spamcop used to be awful, with vast numbers of false alarms. But since Ironport bought them several years ago, there's been a nearly complete turnover of staff and

Re: Postscreen and exceptions

2013-01-06 Thread Ron Guerin
On 01/06/2013 12:29 PM, John Levine wrote: Don't use spamcop, or use it only with small weight in a scoring system. I agree that Spamcop used to be awful, with vast numbers of false alarms. But since Ironport bought them several years ago, there's been a nearly complete turnover of staff and

Re: Postscreen and exceptions

2013-01-06 Thread Stan Hoeppner
On 1/6/2013 6:18 PM, Ron Guerin wrote: On 01/06/2013 12:29 PM, John Levine wrote: Don't use spamcop, or use it only with small weight in a scoring system. I agree that Spamcop used to be awful, with vast numbers of false alarms. But since Ironport bought them several years ago, there's been

Re: Postscreen and exceptions

2012-12-27 Thread mouss
Le 27/12/2012 04:05, Stan Hoeppner a écrit : On 12/26/2012 6:19 PM, Noel Jones wrote: On 12/26/2012 4:52 PM, Stan Hoeppner wrote: On 12/24/2012 4:57 PM, Noel Jones wrote: Opinions differ on psbl.surriel and barracudacentral, but they are frequently used in scoring rather than outright. A

Re: Postscreen and exceptions

2012-12-26 Thread Stan Hoeppner
On 12/24/2012 4:34 PM, Alex wrote: Hi, Dec 24 00:28:50 mail02 postfix/postscreen[1468]: NOQUEUE: reject: RCPT from [195.81.140.87]:32798: 550 5.7.1 Service unavailable; client [195.81.140.87] blocked using bl.spamcop.net; from=u...@libero.it, to=f...@example.com, proto=SMTP,

Re: Postscreen and exceptions

2012-12-26 Thread Stan Hoeppner
On 12/24/2012 4:57 PM, Noel Jones wrote: Opinions differ on psbl.surriel and barracudacentral, but they are frequently used in scoring rather than outright. A site listed on two of these three is likely spam, a site listed on only one of them is questionable. Nonsense. The mere fact that a

Re: Postscreen and exceptions

2012-12-26 Thread Noel Jones
On 12/26/2012 4:52 PM, Stan Hoeppner wrote: On 12/24/2012 4:57 PM, Noel Jones wrote: Opinions differ on psbl.surriel and barracudacentral, but they are frequently used in scoring rather than outright. A site listed on two of these three is likely spam, a site listed on only one of them is

Re: Postscreen and exceptions

2012-12-26 Thread Stan Hoeppner
On 12/25/2012 9:26 PM, Alex wrote: Hi, My postscreen config contains: postscreen_access_list = permit_mynetworks, cidr:/etc/postfix/postscreen_access.cidr postscreen_dnsbl_threshold = 1 postscreen_dnsbl_action = enforce postscreen_greet_action = enforce postscreen_blacklist_action =

Re: Postscreen and exceptions

2012-12-26 Thread Stan Hoeppner
On 12/26/2012 6:19 PM, Noel Jones wrote: On 12/26/2012 4:52 PM, Stan Hoeppner wrote: On 12/24/2012 4:57 PM, Noel Jones wrote: Opinions differ on psbl.surriel and barracudacentral, but they are frequently used in scoring rather than outright. A site listed on two of these three is likely

Re: Postscreen and exceptions

2012-12-25 Thread Alex
Hi, My postscreen config contains: postscreen_access_list = permit_mynetworks, cidr:/etc/postfix/postscreen_access.cidr postscreen_dnsbl_threshold = 1 postscreen_dnsbl_action = enforce postscreen_greet_action = enforce postscreen_blacklist_action = enforce postscreen_dnsbl_sites =

Re: Postscreen and exceptions

2012-12-24 Thread Stan Hoeppner
On 12/23/2012 7:38 PM, Alex wrote: Hi, I've implemented postscreen with postfix-2.9.4 on fc17 and it is rejecting mail from alice.it and libero.it, which are apparently two ISPs in Italy. We receive a large number of messages that are rejected due to postscreen, but now we have one email

Re: Postscreen and exceptions

2012-12-24 Thread Alex
Hi, I haven't been able to find much available on the proper use for smtpd_mumble_restrictions. It doesn't seem to be documented with postscreen or the postconf page or even my postconf output. smtpd_mumble_restrictions is shorthand for use any of smtpd_{client, helo, sender, recipient,

Re: Postscreen and exceptions

2012-12-24 Thread Alex
Hi, It also looks like mail originates from IPs other than those listed as an MX record for alice.it, so I'm not even sure what the range would be for the postscreen permit rules. As always it would be helpful if you provided Postfix logging of these rejections so we can see what is

Re: Postscreen and exceptions

2012-12-24 Thread Stan Hoeppner
On 12/24/2012 2:26 PM, Alex wrote: Dec 24 00:28:50 mail02 postfix/postscreen[1468]: NOQUEUE: reject: RCPT from [195.81.140.87]:32798: 550 5.7.1 Service unavailable; client [195.81.140.87] blocked using bl.spamcop.net; from=u...@libero.it, to=f...@example.com, proto=SMTP,

Re: Postscreen and exceptions

2012-12-24 Thread Alex
Hi, Dec 24 00:28:50 mail02 postfix/postscreen[1468]: NOQUEUE: reject: RCPT from [195.81.140.87]:32798: 550 5.7.1 Service unavailable; client [195.81.140.87] blocked using bl.spamcop.net; from=u...@libero.it, to=f...@example.com, proto=SMTP, helo=static-195-81-140-87.irtnet.net Here's your

Re: Postscreen and exceptions

2012-12-24 Thread Wietse Venema
Alex: Dec 24 04:23:11 mail02 postfix/postscreen[1468]: NOQUEUE: reject: RCPT from [212.52.84.101]:54948: 550 5.7.1 Service unavailable; client [212.52.84.101] blocked using bl.spamcop.net; Don't use spamcop, or use it only with small weight in a scoring system. Wietse

Re: Postscreen and exceptions

2012-12-24 Thread /dev/rob0
On Mon, Dec 24, 2012 at 05:34:20PM -0500, Alex wrote: Dec 24 00:28:50 mail02 postfix/postscreen[1468]: NOQUEUE: reject: RCPT from [195.81.140.87]:32798: 550 5.7.1 Service unavailable; client [195.81.140.87] blocked using bl.spamcop.net; from=u...@libero.it, to=f...@example.com,

Re: Postscreen and exceptions

2012-12-24 Thread Noel Jones
On 12/24/2012 2:16 PM, Alex wrote: Hi, I haven't been able to find much available on the proper use for smtpd_mumble_restrictions. It doesn't seem to be documented with postscreen or the postconf page or even my postconf output. smtpd_mumble_restrictions is shorthand for use any of

Re: Postscreen and exceptions

2012-12-23 Thread Reindl Harald
Am 24.12.2012 02:38, schrieb Alex: It also looks like mail originates from IPs other than those listed as an MX record for alice.it MX record has nothing to do with sending IP's it is only the incoming server in nearly any larger setup they are different because you have incoming servers

Re: Postscreen and exceptions

2012-12-23 Thread Wietse Venema
Alex: Hi, I've implemented postscreen with postfix-2.9.4 on fc17 and it is rejecting mail from alice.it and libero.it, which are apparently two ISPs in Italy. We receive a large number of messages that are rejected due to postscreen, but now we have one email address from each domain that

Re: Postscreen and exceptions

2012-12-23 Thread Alex
Hi, I've implemented postscreen with postfix-2.9.4 on fc17 and it is rejecting mail from alice.it and libero.it, which are apparently two ISPs in Italy. We receive a large number of messages that are rejected due to postscreen, but now we have one email address from each domain that we need