Hi, >> It also looks like mail originates from IPs other than those listed as >> an MX record for alice.it, so I'm not even sure what the range would >> be for the postscreen permit rules. > > As always it would be helpful if you provided Postfix logging of these > rejections so we can see what is actually happening. At this point we > don't know if it's the postscreen bot detection that's causing the > rejections, or the dnsbls you have configured in postscreen that are > causing the rejections. The proper fix to your problem may be different > depending on the which is causing the rejections.
It looks like some from alice.it make it through successfully: Dec 24 07:51:15 mail01 postfix/smtpd[22059]: connect from smtp304.alice.it[82.57.200.93] While others are rejected: Dec 24 08:00:46 mail01 postfix/postscreen[24923]: NOQUEUE: reject: RCPT from [82.57.200.119]:48396: 550 5.7.1 Service unavailable; client [82.57.200.119] blocked using bl.spamcop.net; from=<u...@alice.it>, to=<massimo.ari...@example.com>, proto=ESMTP, helo=<smtp303.alice.it> For libero.it, there are far more rejections, and I don't know if the IPs are actual libero.it IPs or just spoofed emails from that domain, or customers of the ISP: Dec 24 00:28:50 mail02 postfix/postscreen[1468]: NOQUEUE: reject: RCPT from [195.81.140.87]:32798: 550 5.7.1 Service unavailable; client [195.81.140.87] blocked using bl.spamcop.net; from=<u...@libero.it>, to=<f...@example.com>, proto=SMTP, helo=<static-195-81-140-87.irtnet.net> I know now this one is listed in their SPF records: Dec 24 10:03:07 mail01 postfix/postscreen[24923]: NOQUEUE: reject: RCPT from [212.52.84.101]:49951: 550 5.7.1 Service unavailable; client [212.52.84.101] blocked using bl.spamcop.net; from=<u...@libero.it>, to=<u...@example.com>, proto=ESMTP, helo=<outrelay01.libero.it> Thanks, Alex
