On Dec 4, 2011 9:21 AM, "Michael Orlitzky" <michael@orlitzky.com> wrote:
>
> On 12/03/2011 08:59 PM, Pandu Poluan wrote:
>>
>>
>>
>> This is new information to me. If you're subscribed to Gentoo-server,
>> you'll know that I am in the process of setting up a mailfiltering
>> gateway for my company.
>>
>> Any resources on this "postscreen" facility? sounds like a very nice
>> thing to implement.
>>
>> Rgds,
>>
>
> Postscreen is just part of Postfix; it's a separate daemon added in the
latest version.
>
> This is the official README:
>
>  http://www.postfix.org/POSTSCREEN_README.html
>
> and the configuration parameters are documented in the usual place:
>
>  http://www.postfix.org/postconf.5.html
>
>
> Here's the entirety of my main.cf postscreen section for reference. I've
deemed these safe, but you shouldn't enable them without reading what they
do!
>
>
> #
> # Postscreen settings
> #
>
> postscreen_greet_action = enforce
>
> postscreen_dnsbl_sites =
>        psbl.surriel.com,
>        bl.spamcop.net,
>        zen.spamhaus.org,
>        b.barracudacentral.org
>
> postscreen_dnsbl_threshold = 1
> postscreen_dnsbl_action = enforce
>
>
> ##
> ## Deep protocol tests
> ##
>
> postscreen_pipelining_enable = yes
> postscreen_pipelining_action = enforce
>
> postscreen_non_smtp_command_enable = yes
> postscreen_non_smtp_command_action = enforce
>
> postscreen_bare_newline_enable = yes
> postscreen_bare_newline_action = enforce
>

Thanks! Very helpful resources.

You mentioned amavisd-new. What's their relationship? I mean, if I deploy
postscreen, how will it affect amavisd-new?

TIA

Rgds,