Re: [gentoo-user] clamav and spamassassin

[Grant]

>> What about trouble with the DNSBL lists?  I know when I changed my IP
>> address I had to work to get the new one removed from a few blacklists
>> it had previously been placed on.  I wasn't sending spam, but my
>> messages would have been blocked under that config if I hadn't done
>> the work to get the IP off the lists.
>>
>> - Grant
>>
>
> We do get false positives from the blacklists on rare occasion, but they're
> the same ones we got before postscreen.
>
> Before postscreen, we had,
>
>  smtpd_recipient_restrictions =
>        permit_mynetworks,
>        ...
>        reject_rbl_client psbl.surriel.com,
>        reject_rbl_client bl.spamcop.net,
>        reject_rbl_client zen.spamhaus.org,
>        reject_rbl_client b.barracudacentral.org,
>        permit
>
> After postscreen, we have,
>
>  smtpd_recipient_restrictions =
>        permit_mynetworks,
>        ...
>        permit
>
>
>  postscreen_dnsbl_sites =
>        psbl.surriel.com,
>        bl.spamcop.net,
>        zen.spamhaus.org,
>        b.barracudacentral.org
>
> The two should be more or less equivalent considering that
> postscreen_dnsbl_threshold = 1. (I should mention that you have to register
> with barracuda before using their list.)

Got it.  Your explanations are positively lucid.

I added this to /etc/postifx/main.cf:

postscreen_greet_action = enforce
postscreen_pipelining_enable = yes
postscreen_pipelining_action = enforce
postscreen_non_smtp_command_enable = yes
postscreen_non_smtp_command_action = enforce
postscreen_bare_newline_enable = yes
postscreen_bare_newline_action = enforce

and I commented this and restarted postfix:

#check_policy_service inet:127.0.0.1:10030

Should this effectively disable postgrey and enable postscreen?

- Grant