I have my postfix main.cf configured with a number of blacklists:

smtpd_recipient_restrictions =
    reject_rbl_client opm.blitzed.org,
    reject_rbl_client zombie.dnsbl.sorbs.net,
    reject_rbl_client cbl.abuseat.org,
    reject_rbl_client multi.uribl.com,
    reject_rbl_client dsn.rfc-ignorant.org,
    reject_rbl_client dul.dnsbl.sorbs.net,
    reject_rbl_client sbl-xbl.spamhaus.org,
    reject_rbl_client bl.spamcop.net,
    reject_rbl_client dnsbl.sorbs.net,
    reject_rbl_client ix.dnsbl.manitu.net,
    reject_rbl_client combined.rbl.msrbl.net

An incoming mail was just rejected because it appeared on one of these lists (sorbs.net) but not on the others. Is it possible to configure postfix to only reject if 2 or more lists contain that IP address? I'm hoping this will remove false matches...

  • I've been reading about the different lists and it seems that sorbs.net has a tendency to add IPs a little too easily. I'm thinking of just removing those from my config. Jan 31 '13 at 11:21

Upgrade your postfix version to at least 2.8, and configure postscreen.

It supports complex weighting and thresholds for individual DNSBLs

  • Gosh - I'm on Centos5 still and have only 2.3.3... Jan 31 '13 at 13:20
  • Postfix 2.**5** is no longer supported; 2.3 has been EOL for a few years.
    – adaptr
    Jan 31 '13 at 13:33

AFAIK what you ask is not possible with a standard postfix configuration. However, you could delegate the RBL checks to a postfix policy daemon that would do some custom checking of your own.

I'd suggest you have a look at the list of such daemons provided on the Postfix website. One of them might suit your needs. I've not used any of those but, looking at the documentation, the following seems particularly useful:

  • Gross: does RBL checks and greylisting and combine them in different ways,
  • policyd-weight: scores an incoming message depending on header contents, RBL checks and some other DNS queries, then accept or discards the message if the score is too high,
  • postfwd: does a lot more other things too (might be overkill for your needs),

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.