SteveJ's Postfix:Postscreen configuration options

Postfix Postscreen Options

# POSTSCREEN OPTIONS v2017-03-18
postscreen_access_list = permit_mynetworks,
        cidr:/etc/postfix/postscreen_access.cidr,
        cidr:/etc/postfix/postscreen_spf_whitelist.cidr,
        hash:/etc/postfix/postscreen_whitelist

postscreen_blacklist_action = drop
postscreen_dnsbl_action = enforce
postscreen_greet_action = enforce
postscreen_dnsbl_threshold = 3
postscreen_dnsbl_whitelist_threshold = -1

postscreen_dnsbl_sites =
        zen.spamhaus.org*3
        bl.mailspike.net*2
        b.barracudacentral.org*2
        bl.spameatingmonkey.net
        bl.spamcop.net
        dnsbl.sorbs.net
        psbl.surriel.com
        swl.spamhaus.org*-4
        list.dnswl.org=127.0.[2..15].0*-2
        list.dnswl.org=127.0.[2..15].1*-3
        list.dnswl.org=127.0.[2..15].[2..3]*-4
        wl.mailspike.net=127.0.0.[17;18]*-1
        wl.mailspike.net=127.0.0.[19;20]*-2

# Postscreen Deep Protocol Tests
#postscreen_pipelining_enable = yes
#postscreen_pipelining_action = enforce
#postscreen_non_smtp_command_enable = yes
#postscreen_non_smtp_command_action = drop
#postscreen_bare_newline_enable = yes
#postscreen_bare_newline_action = ignore