Wietse, 127.0.0.1 was in the resolv.conf file on the NS from the start.
If I take out the GoogleDNS from the name servers, would that resolve this issue? Someone else mentioned SH's DQS. The reason I switched to that was the open resolver error below. Jan 13 15:58:59 host1 postfix/smtpd[4064756]: NOQUEUE: reject: RCPT from unknown[158.69.8.43]: 554 5.7.1 Service unavailable; Client host [158.69.8.43] blocked using zen.spamhaus.org; Error: open resolver; https://check.spamhaus.org/returnc/pub/2400:cb00:66:1024::a29e:8c55/; from=<return-a16685-388142-388415-139fe8f4=1771780583=8...@moto.maebemoto.com> to=<stef...@hldns.com> proto=ESMTP helo=<jmv3b6x4xel7.pathtowellnesscoach.com> Thank you, Steffan Cline stef...@hldns.com <mailto:stef...@hldns.com> 602-793-0014 On 1/13/25, 1:33 PM, "Wietse Venema via Postfix-users" <postfix-users@postfix.org <mailto:postfix-users@postfix.org>> wrote: Steffan Cline via Postfix-users: > Wietse, > > On my mail server, this is the resolv.conf > > # cat /etc/resolv.conf > # Generated by NetworkManager > search hldns.com > nameserver 199.249.188.251 > nameserver 199.249.188.252 > nameserver 199.249.188.253 > > These are all my own name servers however on my NS VMs, the resolv.conf has > nameserver 127.0.0.1 > nameserver 8.8.8.8 > nameserver 8.8.4.4 You are forwarding queries from Postfix to 199.249.188.251 etc; and then to 8.8.8.8 etc. > There was no mention of this on any of their instructions for DQS. You may have missed that Spamhaus won't support queries from third-party resolvers. (you=first party, spamhaus=second party). > What exactly should be in there? Your NS VMs should not be using 8.8.8.8 and 8.8.4.4. What does "nameserver 127.0.0.1" go to? Wietse _______________________________________________ Postfix-users mailing list -- postfix-users@postfix.org <mailto:postfix-users@postfix.org> To unsubscribe send an email to postfix-users-le...@postfix.org <mailto:postfix-users-le...@postfix.org> _______________________________________________ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org
