postfix-users May 2014 archive
Main Archive Page > Month Archives  > postfix-users archives
postfix-users: Re: Whitelisting individual addresses with postsc

Re: Whitelisting individual addresses with postscreen

From: D'Arcy J.M. Cain <darcy_at_nospam>
Date: Wed May 14 2014 - 15:35:59 GMT
To: postfix users <postfix-users@postfix.org>

On Wed, 14 May 2014 10:09:19 -0500
Noel Jones <njones@megan.vbhcs.org> wrote:
> On 5/14/2014 9:59 AM, D'Arcy J.M. Cain wrote:
> > It looks like hotmail is on two DNSBLs and postscreen is blocking
> > them. I would like to offer my users a way to whitelist individual
> > addresses but it looks like I can only whitelist CIDR blocks. Is
> > that the case or do I have another option?
>
> The only postscreen whitelisting possible is by IP. Postscreen will
> never (and cannot) see a hostname nor an email address.

Yah, that's what I was afraid of.

> Your choices are:
> - remove the offending DNSBL. Postscreen is not appropriate for a
> DNSBL that intentionally lists hosts sending a mixture of good and
> bad mail, such as hotmail, AOL, etc.

I know that SORBS, one of the listing DNSBLs, shouldn't be used but in
my case it is spamcop that is blocking the mails. I thought that they
were generally considered a good source.

> - move the offending DNSBL to the regular smtpd_*_access checks,
> where whitelisting is possible.

Sounds like my best option here.

-- D'Arcy J.M. Cain System Administrator, Vex.Net http://www.Vex.Net/ IM:darcy_at_Vex.Net VoIP: sip:darcy@Vex.Net