postfix and junk filtering with blocklists

In case other postfix users didn't figure this out (I didn't myself until
recently), it's very simple to configure postfix 2.x to use DNSBLs. Just
insert something this into main.cf

smtpd_client_restrictions =
reject_rbl_client sbl.spamhaus.org
reject_rbl_client relays.ordb.org
reject_rbl_client list.dsbl.org
reject_rbl_client dsn.rfc-ignorant.org

Anyway, those are the DNSBLs I use, there are quite a few out there to
chose from, and all have different policies. But this is a nice way to stop
the spam before it even gets into your network.

--
Jem Berkes
http://www.sysdesign.ca/

On 29 Sep 2003 20:25:09 GMT, Jem Berkes <(E-Mail Removed)9__org> wrote:

>In case other postfix users didn't figure this out (I didn't myself until
>recently), it's very simple to configure postfix 2.x to use DNSBLs. Just
>insert something this into main.cf
>
>smtpd_client_restrictions =
> reject_rbl_client sbl.spamhaus.org
> reject_rbl_client relays.ordb.org
> reject_rbl_client list.dsbl.org
> reject_rbl_client dsn.rfc-ignorant.org
>
>Anyway, those are the DNSBLs I use, there are quite a few out there to
>chose from, and all have different policies. But this is a nice way to stop
>the spam before it even gets into your network.

Oh boy, I think this will generate some discussion! I use spamhaus
myself. I did also use spamcop but found they were blocking some legit
emails.

Lately, I have found myself rethinking the whole "rbl" thing myself.
I'm not sure it is that good of an idea. My spam problem is not as
severe as other people experience. There are other ways to skin that
cat.

--
"Now are you talking about what it is you know
Or just repeating what it was you heard."
Grace Slick

To E-mail use: rpiotro(at)wi(dot)rr(dot)com

>>smtpd_client_restrictions =
>> reject_rbl_client sbl.spamhaus.org
>> reject_rbl_client relays.ordb.org
>> reject_rbl_client list.dsbl.org
>> reject_rbl_client dsn.rfc-ignorant.org
>>
>>Anyway, those are the DNSBLs I use, there are quite a few out there to
>>chose from, and all have different policies. But this is a nice way to
>>stop the spam before it even gets into your network.
>
> Oh boy, I think this will generate some discussion! I use spamhaus
> myself. I did also use spamcop but found they were blocking some legit
> emails.
>
> Lately, I have found myself rethinking the whole "rbl" thing myself.
> I'm not sure it is that good of an idea. My spam problem is not as
> severe as other people experience. There are other ways to skin that
> cat.

sbl.spamhaus.org is OK; they are listing IPs of known spam operations. They
are a reliable group, and all data is backed up with evidence files.

Anyway I get way better results using spamprobe, a bayesian filter on the
site. But because my server is getting quite busy now I had to save some
bandwidth. The larger a site gets, the more it has to rely on DNSBLs
because admins love to stop the spam before it even wastes your bandwidth.

--
Jem Berkes
http://www.sysdesign.ca/