Skip to content

Instantly share code, notes, and snippets.

@stevejenkins
Last active June 17, 2018 20:57
Show Gist options
  • Star 2 You must be signed in to star a gist
  • Fork 2 You must be signed in to fork a gist
  • Save stevejenkins/5489071 to your computer and use it in GitHub Desktop.
Save stevejenkins/5489071 to your computer and use it in GitHub Desktop.
SteveJ's Postfix:Postscreen configuration options
# POSTSCREEN OPTIONS v2017-03-18
postscreen_access_list = permit_mynetworks,
cidr:/etc/postfix/postscreen_access.cidr,
cidr:/etc/postfix/postscreen_spf_whitelist.cidr,
hash:/etc/postfix/postscreen_whitelist
postscreen_blacklist_action = drop
postscreen_dnsbl_action = enforce
postscreen_greet_action = enforce
postscreen_dnsbl_threshold = 3
postscreen_dnsbl_whitelist_threshold = -1
postscreen_dnsbl_sites =
zen.spamhaus.org*3
bl.mailspike.net*2
b.barracudacentral.org*2
bl.spameatingmonkey.net
bl.spamcop.net
dnsbl.sorbs.net
psbl.surriel.com
swl.spamhaus.org*-4
list.dnswl.org=127.0.[2..15].0*-2
list.dnswl.org=127.0.[2..15].1*-3
list.dnswl.org=127.0.[2..15].[2..3]*-4
wl.mailspike.net=127.0.0.[17;18]*-1
wl.mailspike.net=127.0.0.[19;20]*-2
# Postscreen Deep Protocol Tests
#postscreen_pipelining_enable = yes
#postscreen_pipelining_action = enforce
#postscreen_non_smtp_command_enable = yes
#postscreen_non_smtp_command_action = drop
#postscreen_bare_newline_enable = yes
#postscreen_bare_newline_action = ignore
@getgray
Copy link

getgray commented Jul 14, 2017

What do you keep in this file: hash:/etc/postfix/postscreen_whitelist

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment