From 4f33f3d426c3e539a5ea0e0920959e3513b2be18 Mon Sep 17 00:00:00 2001 From: Christoph Date: Sun, 8 Nov 2026 13:41:45 +0100 Subject: [PATCH] install_postfix_advanced.sh: fix return code range of zen.spamhaus.org ZEN answers with 127.0.0.x, so the previous range 127.0.1.[2..99] (used by DBL) never matched and the filter was without effect. Use 127.0.0.[2..11]. A range is still required: if Spamhaus blocks our queries, it answers with error codes like 127.255.255.254, which must not reject mail. Co-Authored-By: Claude Opus 5.5 --- install_postfix_advanced.sh | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/install_postfix_advanced.sh b/install_postfix_advanced.sh index 0b9b765..c47d936 100755 --- a/install_postfix_advanced.sh +++ b/install_postfix_advanced.sh @@ -2548,7 +2548,12 @@ smtpd_client_restrictions = reject_rhsbl_helo dbl.spamhaus.org=127.0.1.[2..99], reject_rhsbl_reverse_client dbl.spamhaus.org=127.0.1.[2..99], reject_rhsbl_sender dbl.spamhaus.org=127.0.1.[2..99], - reject_rbl_client zen.spamhaus.org=127.0.1.[2..99], + # Only reject on real listings. ZEN answers with 127.0.0.2 - 127.0.0.11, + # DBL with 127.0.1.2 - 127.0.1.99. Do NOT use these lists without a range: + # If Spamhaus blocks our queries, it answers every query with an error code + # like 127.255.255.254. Without a range, all mail would then be rejected. + # + reject_rbl_client zen.spamhaus.org=127.0.0.[2..11], # Greylisting check #