[Postfixbuch-users] RBL, RHSBL und policyd-weight

Django django at nausch.org
Mi Okt 29 22:49:44 CET 2014


HI!

Am 29.10.2014 um 21:50 schrieb sebastian at debianfan.de:

> Kannst Du Deine postscreen-Konfiguration mal bitte posten?

Wer? ich?

Na gut:
################################################################################
## Postscreen
#
# Django : 2014-10-29 - PERMANENT WHITE/BLACKLIST TEST
# default: postscreen_access_list = permit_mynetworks
postscreen_access_list = permit_mynetworks
                         cidr:/etc/postfix/postscreen_whitelist
#
# default: postscreen_blacklist_action = ignore
postscreen_blacklist_action = drop


# Django : 2014-10-29 - MAIL EXCHANGER POLICY TESTS
# default: postscreen_whitelist_interfaces = static:all
postscreen_whitelist_interfaces = !88.217.171.167
                                  static:all


# Django : 2014-10-29 - BEFORE 220 GREETING TESTS
# default: postscreen_dnsbl_threshold = 1
postscreen_dnsbl_threshold = 2
#
# default: postscreen_dnsbl_sites =
postscreen_dnsbl_sites = zen.spamhaus.org*2
                         bl.spamcop.net*1
                         b.barracudacentral.org*1
                         swl.spamhaus.org*2
#
# default: postscreen_dnsbl_action = ignore
postscreen_dnsbl_action = enforce
#
# default: postscreen_greet_banner = $smtpd_banner
#
# default: postscreen_greet_action = ignore
postscreen_greet_action = enforce


# Django : 2014-10-29 - AFTER 220 GREETING TESTS
# default: postscreen_bare_newline_action = ignore
postscreen_bare_newline_action = drop
#
# default: postscreen_bare_newline_enable = no
postscreen_bare_newline_enable = yes
#
# default: postscreen_non_smtp_command_enable = no
postscreen_non_smtp_command_enable = yes
# default: postscreen_non_smtp_command_action = drop
#
# default: postscreen_pipelining_enable = no
postscreen_pipelining_enable = yes
#
# default: postscreen_pipelining_action = enforce


und hier die master.cf
smtp      inet  n       -       n       -       1       postscreen
smtpd     pass  -       -       n       -       -       smtpd
          -o
smtpd_milters=${spf_milter},${opendkim_milter},${opendmarc_milter},${amavisd_milter}
dnsblog   unix  -       -       n       -       0       dnsblog
tlsproxy  unix  -       -       n       -       0       tlsproxy


Servus
Django



Mehr Informationen über die Mailingliste Postfixbuch-users