I now notice there is a warning in the log file only when the postscreen_access file is read (and should have matched):
Oct 2 15:41:05 mx10 postfix/postscreen[11731]: warning: cidr:/etc/postfix/postscreen_access: unknown command: OK -- ignoring the remainder of this access list Also same warning with PERMIT I'm simply listing an IP, some tabs, and PERMIT or OK in attempt to whitelist dnsbl false positives. e.g.: 210.44.128.104 OK So, with some experimenting, and checking again the documentation, I switched it to use "permit" in lowercase. 210.44.128.104 permit Now it works. I have many files configured with PERMIT in other cases, and they all work. This is the first time I've seen case matter in a postfix config value. Using 2.9.4 today...