farrokhi/postfix-rbl.md

Last active July 22, 2021 04:07

Star () You must be signed in to star a gist
Fork () You must be signed in to fork a gist

Learn more about clone URLs
Clone this repository at <script src="https://gist.github.com/farrokhi/e27dfd5a09920f042664.js"></script>
Save farrokhi/e27dfd5a09920f042664 to your computer and use it in GitHub Desktop.

Download ZIP

Current Effective RBL Setup for Postfix

Raw

postfix-rbl.md

Current Effective RBL Setup for Postfix

main.cf:

    smtpd_recipient_restrictions =
      permit_mynetworks,
      permit_sasl_authenticated,
      reject_non_fqdn_hostname,
      reject_non_fqdn_sender,
      reject_non_fqdn_recipient,
      reject_unauth_destination,
      reject_unauth_pipelining,
      reject_invalid_hostname,
      reject_rbl_client bl.spamcop.net,
      reject_rbl_client cbl.abuseat.org,
      reject_rbl_client dnsbl.sorbs.net,
      reject_rbl_client zen.spamhaus.org

xpufx commented Mar 4, 2020

Isn't it better to use postscreen and take care of the RBL stuff there?

tuaris commented Sep 12, 2020

I'm not sure if this is done with Postfix, but I would like to see if its possible (when using dovecot) to have postfix deliver mail from blocked hosts to a junk/spam folder.

@oktayaa the postscreen thing looks interesting. Is their an example setup to look at?

xpufx commented Sep 12, 2020

@tuaris I believe I used this as a reference. It also has a link to the documentation you need at the top.
http://rob0.nodns4.us/postscreen.html

raforg commented Jul 22, 2021

cbl.abuseat.org should be removed. If it still works at all, it's a subset of zen.spamhaus.org, so it's a wasteful DNS lookup. See https://www.abuseat.org/cutover.html for details.

Also, for postscren documentation, see http://www.postfix.org/POSTSCREEN_README.html (or http://www.postfix.org/POSTSCREEN_3_5_README.html for older versions).