From: Noel Jones on
On 3/18/2010 5:28 PM, Jan P. Kessler wrote:
>
>>> This whitelist is 1409 records long, so indeed as you say very small. I
>>> suppose I could download it and host it locally. Apparently AXFR is not
>>> allowed, but plain text HTTP download is, so that's good enough.
>>> Then I would only need an efficient and robust way for postfix to use
>>> it.
>>
>> If they let you download a list of IPs, just use your favorite
>> sed/awk/perl to change it into an access table.
>
> The question is: Will this be really more reliable than using a policy
> service that simply queries dns for this task?
>

Assuming the list doesn't change very often so that updates a
couple times a day will be sufficient, and assuming a sane
update script that eg. doesn't clobber the existing list on
failure etc., a local access table is faster and at least as
reliable as a DNS query.

-- Noel Jones