On 7-Apr-2009, at 13:53, Victor Duchovni wrote:
checking pbs map (pop-before-smtp)
$ postmap -q 71.211.x.x hash:/etc/postfix/pbs
ok

The timeout on pbs is around 60 minutes.

this is the log line that gets the IP address into pbs:
Apr  6 19:43:09 mail courier-i-ssl: LOGIN, user=user1,
ip=[::ffff:71.211.x.x], protocol=IMAP

This is an IPv4 in IPv6 address, what form of this address did
pop-before-smtp add to the database?

it added 71.211.x.x (just like I showed in the look up from the postmap-q).

And here is the attempt to send:
Apr  6 19:44:53 mail postfix/smtpd[81337]: NOQUEUE: reject: RCPT from
71-211-x-x.hlrn.qwest.net[71.211.x.x]: 554 5.7.1 Service unavailable;
Client host [71.211.x.x] blocked using zen.spamhaus.org;
http://www.spamhaus.org/query/bl?ip=71.211.x.x;
from=<us...@localdomain.tld> to=<us...@2ndlocaldomain.tld> proto=ESMTP
helo=<[192.168.0.3]>

This is an IPv4 connection. Either too soon for the pbs listing to have been made, or the pbs lookup key is IPv6 (pbs supports such log entries
at all). This made it because the recipient was not remote.

made it? it was rejected.

Don't report similar issues without accompanying "postmap -q" results
that demostrate the presence/absence of the expected keys/values.

the IP4 is being added to the bps, and I DID show the postmap -q

and also this:
pr  6 19:43:09 mail postfix/smtpd[81337]: NOQUEUE: reject: RCPT from
71-211-x.x.hlrn.qwest.net[71.211.x.x]: 554 5.7.1 <user3@@earthlink.net>: Relay access denied; from=<us...@localdomain.tld> to=<us...@earthlink.net >
proto=ESMTP helo=<[192.168.0.3]>

This was blocked by "reject_unauth_destination". Consistent with ipv4
address not present as a lookup key in the "pbs" table.

Right, but as near as I can tell (I was not accessing the system at the exact time of the attempt, but rather after the inability to send was reported) the IP _was_ in the pbs database.

I have to assume this is some pbs issue though, nothing else makes sense. I'll try and dump its list ever few minutes for a while and see what happens when user1 tries to send again.

--
Hey, how come Andrew gets to get up? If he gets up, we'll all get
        up! It'll be anarchy!

Reply via email to