Ralf Hildebrandt:
> This is postfix-2.8-20100610
>
> From my log:
>
> mail:~# fgrep 79.15.172.144 /var/log/mail.log
> Jun 15 18:15:06 mail postfix/dnsblog[12235]: addr 79.15.172.144 blocked by
> domain mykey.zen.dq.spamhaus.net as 127.0.0.4
> Jun 15 18:15:10 mail postfix/postscreen[14995]: DNSBL rank 1 for 79.15.172.144
>
> So it seems to be listed!
>
> Jun 15 18:15:10 mail postfix/smtpd[4613]: connect from
> host144-172-static.15-79-b.business.telecomitalia.it[79.15.172.144]
Not here:
% grep 119.123.112.28 /var/log/maillog
Jun 15 00:00:43 spike postfix/dnsblog[52314]: addr 119.123.112.28 blocked by
domain zen.spamhaus.org as 127.0.0.11
Jun 15 00:00:47 spike postfix/postscreen[52313]: DNSBL rank 1 for 119.123.112.28
and nothing else is logged for that IP address.
More thoroughly, when I search for all IP addresses that show up
in postscreen "DNSBL rank XXX" records:
% egrep "`awk '/DNSBL rank/ { print $NF }' /var/log/maillog | sort -u`"
/var/log/maillog | grep smtpd
produces no smtpd logfile records at all.
% postconf -n | grep postscreen
postscreen_dnsbl_action = drop
postscreen_dnsbl_sites = zen.spamhaus.org
postscreen_greet_action = drop
postscreen_hangup_action = drop
postscreen_pre_queue_limit = 100
Wietse
