Re: configuration postscreen

2019-12-18 Thread Claus R. Wickinghoff
Hi Wietse, So for me it still makes sense to combine postscreen with postgrey, as postscreen works mainly on ip addresses (their reputation in fact) while postgrey also takes care on sender's and recipient's e-mail addresses. By design, postscreen does not know the sender or recipient. In

Re: configuration postscreen

2019-12-18 Thread Wietse Venema
Wietse Venema: > Claus R. Wickinghoff: > > So for me it still makes sense to combine postscreen with postgrey, as > > postscreen works mainly on ip addresses (their reputation in fact) while > > postgrey also takes care on sender's and recipient's e-mail addresses. > > By design, postscreen

Re: configuration postscreen

2019-12-18 Thread Wietse Venema
Claus R. Wickinghoff: > So for me it still makes sense to combine postscreen with postgrey, as > postscreen works mainly on ip addresses (their reputation in fact) while > postgrey also takes care on sender's and recipient's e-mail addresses. By design, postscreen does not know the sender or

Re: configuration postscreen

2019-12-14 Thread Matus UHLAR - fantomas
>I would avoid unduly short postscreen cache times, that can lead to >legitimate clients not getting through at all. On Fri, Dec 13, 2019 at 05:40:33PM +0100, Matus UHLAR - fantomas wrote: I'm not sure if that would help. Apparently, both postscreen and smtpd will use the same nameserver for

Re: configuration postscreen

2019-12-13 Thread Viktor Dukhovni
On Fri, Dec 13, 2019 at 05:40:33PM +0100, Matus UHLAR - fantomas wrote: > >I would avoid unduly short postscreen cache times, that can lead to > >legitimate clients not getting through at all. > > I'm not sure if that would help. Apparently, both postscreen and smtpd will > use the same

Re: configuration postscreen

2019-12-13 Thread Matus UHLAR - fantomas
On Fri, Dec 13, 2019 at 11:03:49AM +0100, Claus R. Wickinghoff wrote: Dec 13 09:16:27 mole postfix/postscreen[1771]: PASS OLD [45.146.203.135]:49121 Now it reconnects and with the cache entry it's calssified as "PASS OLD" and got redirected to smtpd... Dec 13 09:16:27 mole

Re: configuration postscreen

2019-12-13 Thread Viktor Dukhovni
On Fri, Dec 13, 2019 at 11:03:49AM +0100, Claus R. Wickinghoff wrote: > Dec 13 09:16:27 mole postfix/postscreen[1771]: PASS OLD [45.146.203.135]:49121 > > Now it reconnects and with the cache entry it's calssified as "PASS OLD" > and got redirected to smtpd... > > Dec 13 09:16:27 mole

Re: configuration postscreen

2019-12-13 Thread Wietse Venema
Claus R. Wickinghoff: > Dec 13 09:06:27 mole postfix/postscreen[1729]: PASS NEW > [45.146.203.135]:60433 [client gets 450 from after-220 tests] > Dec 13 09:16:27 mole postfix/postscreen[1771]: PASS OLD > [45.146.203.135]:49121 ... > The problem is: The system starts delivering spam and in the