diff --git a/postfix/HISTORY b/postfix/HISTORY index e4371d948..3539c14b2 100644 --- a/postfix/HISTORY +++ b/postfix/HISTORY @@ -16028,3 +16028,8 @@ Apologies for any names omitted. Cleanup: postscreen now logs CONNECT and DISCONNECT events. Files: postscreen/postscreen.c, postscreen/postscreen_misc.c. + +20100917 + + Bugfix: cut-and-paste error. Postscreen used pregreet_ttl + instead of dnsbnl_ttl. File: postscreen/postscreen_early.c. diff --git a/postfix/README_FILES/POSTSCREEN_README b/postfix/README_FILES/POSTSCREEN_README index 6851341ea..952f33402 100644 --- a/postfix/README_FILES/POSTSCREEN_README +++ b/postfix/README_FILES/POSTSCREEN_README @@ -452,7 +452,8 @@ mail: /etc/postfix/main.cf: postscreen_dnsbl_threshold = 2 - postscreen_dnsbl_sites = zen.spamhaus.org*2 example.com*1 example.net*1 + postscreen_dnsbl_sites = zen.spamhaus.org*2 + bl.spamcop.net*1 b.barracudacentral.org*1 Note: if your DNSBL queries have a "secret" in the domain name, you must censor this information from the postscreen(8) SMTP replies. For example: @@ -575,6 +576,5 @@ so he added support for DNSBL weights and filters in August, followed by a major code rewrite, deep protocol tests, helo/sender/recipient logging, and stress-adaptive behavior in September. Ralf Hildebrandt ran this code on several servers to collect real-world statistics. This version still used the -same delay for pregreet and DNSBL tests, as well as the embarrassing dnsblog(8) -ad-hoc DNS client. +embarrassing dnsblog(8) ad-hoc DNS client program. diff --git a/postfix/html/POSTSCREEN_README.html b/postfix/html/POSTSCREEN_README.html index d9734d344..33ef1a4f4 100644 --- a/postfix/html/POSTSCREEN_README.html +++ b/postfix/html/POSTSCREEN_README.html @@ -625,7 +625,8 @@ weights. For example:
 /etc/postfix/main.cf:
     postscreen_dnsbl_threshold = 2
-    postscreen_dnsbl_sites = zen.spamhaus.org*2 example.com*1 example.net*1
+    postscreen_dnsbl_sites = zen.spamhaus.org*2 
+        bl.spamcop.net*1 b.barracudacentral.org*1
 

Note: if your DNSBL queries have a "secret" in the domain name, @@ -794,9 +795,8 @@ in November 2010, so he added support for DNSBL weights and filters in August, followed by a major code rewrite, deep protocol tests, helo/sender/recipient logging, and stress-adaptive behavior in September. Ralf Hildebrandt ran this code on several servers to -collect real-world statistics. This version still used the same -delay for pregreet and DNSBL tests, as well as the embarrassing -dnsblog(8) ad-hoc DNS client.

+collect real-world statistics. This version still used the embarrassing +dnsblog(8) ad-hoc DNS client program.

diff --git a/postfix/proto/POSTSCREEN_README.html b/postfix/proto/POSTSCREEN_README.html index a7cdd5367..40d9be062 100644 --- a/postfix/proto/POSTSCREEN_README.html +++ b/postfix/proto/POSTSCREEN_README.html @@ -625,7 +625,8 @@ weights. For example:
 /etc/postfix/main.cf:
     postscreen_dnsbl_threshold = 2
-    postscreen_dnsbl_sites = zen.spamhaus.org*2 example.com*1 example.net*1
+    postscreen_dnsbl_sites = zen.spamhaus.org*2 
+        bl.spamcop.net*1 b.barracudacentral.org*1
 

Note: if your DNSBL queries have a "secret" in the domain name, @@ -794,9 +795,8 @@ in November 2010, so he added support for DNSBL weights and filters in August, followed by a major code rewrite, deep protocol tests, helo/sender/recipient logging, and stress-adaptive behavior in September. Ralf Hildebrandt ran this code on several servers to -collect real-world statistics. This version still used the same -delay for pregreet and DNSBL tests, as well as the embarrassing -dnsblog(8) ad-hoc DNS client.

+collect real-world statistics. This version still used the embarrassing +dnsblog(8) ad-hoc DNS client program.

diff --git a/postfix/src/global/mail_version.h b/postfix/src/global/mail_version.h index 4c535474f..1d8d21624 100644 --- a/postfix/src/global/mail_version.h +++ b/postfix/src/global/mail_version.h @@ -20,7 +20,7 @@ * Patches change both the patchlevel and the release date. Snapshots have no * patchlevel; they change the release date only. */ -#define MAIL_RELEASE_DATE "20100917" +#define MAIL_RELEASE_DATE "20100918" #define MAIL_VERSION_NUMBER "2.8" #ifdef SNAPSHOT diff --git a/postfix/src/postscreen/postscreen_early.c b/postfix/src/postscreen/postscreen_early.c index 4cf380f50..4131fa60a 100644 --- a/postfix/src/postscreen/postscreen_early.c +++ b/postfix/src/postscreen/postscreen_early.c @@ -112,7 +112,7 @@ static void ps_early_event(int event, char *context) dnsbl_score = ps_dnsbl_retrieve(state->smtp_client_addr, &dnsbl_name); if (dnsbl_score < var_ps_dnsbl_thresh) { - state->dnsbl_stamp = event_time() + var_ps_pregr_ttl; + state->dnsbl_stamp = event_time() + var_ps_dnsbl_ttl; PS_PASS_SESSION_STATE(state, "dnsbl test", PS_STATE_FLAG_DNSBL_PASS); } else {