install_postfix_advanced.sh: fix return code range of zen.spamhaus.org

ZEN answers with 127.0.0.x, so the previous range 127.0.1.[2..99] (used by
DBL) never matched and the filter was without effect. Use 127.0.0.[2..11].
A range is still required: if Spamhaus blocks our queries, it answers with
error codes like 127.255.255.254, which must not reject mail.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
2026-11-08 13:41:45 +01:00
co-authored by Claude Opus 5.5
parent ad4018eca3
commit 4f33f3d426
+6 -1
View File
@@ -2548,7 +2548,12 @@ smtpd_client_restrictions =
reject_rhsbl_helo dbl.spamhaus.org=127.0.1.[2..99],
reject_rhsbl_reverse_client dbl.spamhaus.org=127.0.1.[2..99],
reject_rhsbl_sender dbl.spamhaus.org=127.0.1.[2..99],
reject_rbl_client zen.spamhaus.org=127.0.1.[2..99],
# Only reject on real listings. ZEN answers with 127.0.0.2 - 127.0.0.11,
# DBL with 127.0.1.2 - 127.0.1.99. Do NOT use these lists without a range:
# If Spamhaus blocks our queries, it answers every query with an error code
# like 127.255.255.254. Without a range, all mail would then be rejected.
#
reject_rbl_client zen.spamhaus.org=127.0.0.[2..11],
# Greylisting check
#