Thursday, March 7, 2024, 3:58:26 PM, Viktor Dukhovni via Postfix-users wrote:
> On Thu, Mar 07, 2024 at 01:06:53PM +1100, Phil Biggs via Postfix-users wrote: >> Today I noticed that, occasionally, I see a syslog message stating "blocked >> using zen.spamhaus..." but no matching "DNSBL rank ..." message. >> >> A couple of examples from the past two days: >> >> postfix/postscreen 84893 - - CONNECT from [43.157.61.211]:30092 to >> [192.168.11.2]:25 >> postfix/dnsblog 84894 - - addr 43.157.61.211 listed by domain >> zen.spamhaus.org as 127.0.0.11 >> postfix/postscreen 84893 - - HANGUP after 3.2 from [43.157.61.211]:30092 in >> tests before SMTP handshake > > --------------------- >> postfix/postscreen 84893 - - DISCONNECT [43.157.61.211]:30092 >> >> Some other syslog records do have the DNSBL rank. For example: >> >> postfix/postscreen 86907 - - CONNECT from [185.242.226.22]:49012 to >> [192.168.11.2]:25 >> postfix/dnsblog 86910 - - addr 185.242.226.22 listed by domain >> zen.spamhaus.org as 127.0.0.3 >> postfix/postscreen 86907 - - DNSBL rank 2 for [185.242.226.22]:49012 >> postfix/postscreen 86907 - - HANGUP after 0.8 from [185.242.226.22]:49012 in >> tests after SMTP handshake > > -------------------- > The client hung up too early for a rank to be logged. Thank you, Viktor. I completely missed that before/after difference. -- Cheers, Phil _______________________________________________ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org
