> Is it possible that the key is being exposed not from the
> postscreen_dnsbl_sites line but from a line also in main.cf which says
> the following?
> smtpd_client_restrictions = reject_rbl_client <hidden-key>.zen.dq.spamhaus.net

Use rbl_reply_maps and a text without $rbl_domain:
http://www.postfix.org/postconf.5.html#rbl_reply_maps

And... get a new spamhaus key, NOW:

# telnet mg05.cnm.edu 25
Trying 198.133.182.65...
Connected to mg05.cnm.edu.
Escape character is '^]'.
220 mg05.cnm.edu ESMTP Postfix
HELO ruv.de
250 mg05.cnm.edu
MAIL FROM:jpk@somedomain
250 2.1.0 Ok
RCPT TO:hostmas...@cnm.edu
554 5.7.1 Service unavailable; Client host [47.66.81.105] blocked using
<GOTIT>.zen.dq.spamhaus.net;
http://www.spamhaus.org/query/bl?ip=47.66.81.105
quit
221 2.0.0 Bye

Reply via email to