On Thu, Mar 07, 2024 at 01:06:53PM +1100, Phil Biggs via Postfix-users wrote:
> Today I noticed that, occasionally, I see a syslog message stating "blocked
> using zen.spamhaus..." but no matching "DNSBL rank ..." message.
>
> A couple of examples from the past two days:
>
> postfix/postscreen 84893 - - CONNECT from [43.157.61.211]:30092 to
> [192.168.11.2]:25
> postfix/dnsblog 84894 - - addr 43.157.61.211 listed by domain
> zen.spamhaus.org as 127.0.0.11
> postfix/postscreen 84893 - - HANGUP after 3.2 from [43.157.61.211]:30092 in
> tests before SMTP handshake
---------------------
> postfix/postscreen 84893 - - DISCONNECT [43.157.61.211]:30092
>
> Some other syslog records do have the DNSBL rank. For example:
>
> postfix/postscreen 86907 - - CONNECT from [185.242.226.22]:49012 to
> [192.168.11.2]:25
> postfix/dnsblog 86910 - - addr 185.242.226.22 listed by domain
> zen.spamhaus.org as 127.0.0.3
> postfix/postscreen 86907 - - DNSBL rank 2 for [185.242.226.22]:49012
> postfix/postscreen 86907 - - HANGUP after 0.8 from [185.242.226.22]:49012 in
> tests after SMTP handshake
--------------------
The client hung up too early for a rank to be logged.
--
Viktor.
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
