Okay....regardless of SASL tries.... I have in the blacklist:
60.166.0.0/15 REJECT but still this kicks in: Aug 11 22:17:36 <mail.info> marvin postfix/smtpd[30519]: connect from unknown[60.167.116.249] Aug 11 22:17:37 <mail.info> marvin postfix/smtpd[30519]: NOQUEUE: reject: RCPT from unknown[60.167.116.249]: 554 5.7.1 Service unavailable; Client host [60.167.116.249] blocked using cbl.abuseat.org; Blocked - see http://www.abuseat.org/lookup.cgi?ip=60.167.116.249; from=<ybftk...@idkibft.info> to=<sa...@klingler.net> proto=SMTP helo=<SKY-20150201SFT.com> Aug 11 22:17:38 <mail.info> marvin postfix/smtpd[30519]: disconnect from unknown[60.167.116.249] So it made up to this point: smtpd_recipient_restrictions = check_client_access cidr:/usr/local/etc/postfix/blacklisted_prefixes, permit_sasl_authenticated, permit_mynetworks, reject_rbl_client bl.blocklist.de, reject_rbl_client ix.dnsbl.manitu.net, reject_rbl_client cbl.abuseat.org <--- For me this tells me that "check_client_access cidr:/usr/local/etc/postfix/blacklisted_prefixes" is just ignored in every case...