rodinux
October 22, 2025, 11:26am
43
Sorry, what think about this suggestion to change the line reject_rbl_client zen.spamhaus.org, with reject_rbl_client zen.spamhaus.org=127.0.0.[2..9], ?
This thread is quite helpful to better understanding the SpamHaus “open resolver” issue.
Ideally I’d want to solve this without completely disabling all DNSBLs, for instance by making this kind of tweak to /etc/postfix/main.cf:
reject_rbl_client bl.spamcop.net,
reject_rbl_client cbl.abuseat.org,
# Ignore PBL (127.0.0.10-11) and "open resolver" (127.0.0.254) reponses
# https://www.spamhaus.org/faqs/dnsbl-usage#what-do-the-127-return-codes-me>
reject_rbl_client zen.spamhaus.o…