Re: Pythonfilter issues

On Mon 31/Mar/2025 07:46:00 +0200 Bernd Wurst wrote:
> 
> I have two issues with the dnswl module:
> - dnswl.org does support IPv6 now and many servers use IPv6, so it's sad that it's not working
> - dnswl.org often blocks us (we should not hit the limit but anyway), which leads to return value 127.0.0.255. The pythonfilter module accepts every return value, so everybody gets whitelisted in that case.


Let me recall that Courier might have already looked up dnswl, possibly adding 
a header like this (from the message I'm replying to):

Authentication-Results: wmail.tana.it;
     dnswl=pass dns.zone=list.dnswl.org
     policy.ip=127.0.9.2
     policy.txt="sourceforge.net https://dnswl.org/s/?s=2873"

Reusing stored results can save a new lookup, thus helping staying below 
100,000 queries.  See https://www.dnswl.org/?page_id=15#returncodes

This setting can also be used to whitelist SPF results, which is what makes it 
possible to receive from domains that use -all.  See docs:
http://www.courier-mta.org/courier.html#SPF


Best
Ale
-- 









_______________________________________________
courier-users mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users