I am wondering what the various possible types of events postscreen logs. I checked man postsreen(8) but it doesn’t seem to give them.
I know there are PASS NEW, PASS OLD, CONNECT, DISCONNECT, HANGUP, NOQUEUE, COMMAND, cache, and DNSBL. Any others I am missing? Are these documented in some other man page? (Currently I’m interested int he difference between HANGUP and DISCONNECT and NOQUEUE and why sometimes hosts that connect thousands of times with high RBL scores don’t necessarily get HANGUP.)