Actually, i don’t know what is wrong. The file people moan about is a older version of the dns_blocklists file which gets appended upon postfix boot.
A better version has been introduced earlier in the year.
However, if that older version exists already mailcow is not deleting it and therefore is not regenerating the file with a proper one.
Due to my change of the main.cf postfix is pasting the old file wrongly into the code.
You may ask: Why has it not been found earlier? Because postfix seems to wrongly interpreted the file anyways, as originally the file has been appended to the previous last main.cf parameter which was parent_domain_matches_subdomains = debug_peer_list,fast_flush_domains,mynetworks,qmqpd_authorized_clients
That stuff is not nicely solved, i’m not happy with it, if anyone has suggestions on how to better implement this, i would be greatful. (This setting (dnsblocklists) does not support file hashing or else, they must be appended with comma, that is the thing why it is hard to implement carefully)