Wietse Venema wrote > Den1: >> 22:19:13 postfix/postscreen[14390]: CONNECT from [46.22.210.20]:58953 to >> [1.1.1.1]:25 >> 22:19:13 postfix/dnsblog[14391]: addr 46.22.210.20 listed by domain >> zen.spamhaus.org as 127.0.0.3 >> 22:19:17 postfix/postscreen[14390]: DNSBL rank 1 for [46.22.210.20]:58953 >> 22:19:17 postfix/postscreen[14390]: DISCONNECT [46.22.210.20]:58953 > > The client is listed at zen.spamhaus.org. The client does not talk to > the Postfix SMTP daemon (smtpd). > >> 22:19:18 postfix/postscreen[14390]: CONNECT from [46.22.210.20]:53440 to >> [1.1.1.1]:25 >> 22:19:22 postfix/postscreen[14390]: PASS NEW [46.22.210.20]:53440 >> 22:19:22 postfix/smtpd[14403]: connect from >> construct.baladle.us[46.22.210.20] > > The client is NOT LISTED at zen.spamhaus.org, or more likely, you > use multiple DNS servers, some of which get service from spamhaus.org, > and some of which don't get service from spamhaus.org. > > Wietse
Thank you so much for your directions and guidance. I really do appreciate. Although I am getting a bit lost. Is it possible for different clients to have the same IP address in such a short period of time as per my logs posted? The first client on the IP address of 46.22.210.20 connected to postscreen, was listed on spamhaus therefore disconnected and didn't talk to SMTP daemon. Then literally just a second later a different client but on the same IP address of 46.22.210.20 connected to postscreen and was allowed to go to SMTPd straight away. How can postscreen tell one client from another if both clients are on the same IP address? Doesn't zen.spamhaus.org check by IP address as well does it? I am somewhat confused. 22:19:13 postfix/postscreen[14390]: CONNECT from [46.22.210.20]:58953 to [1.1.1.1]:25 22:19:13 postfix/dnsblog[14391]: addr 46.22.210.20 listed by domain zen.spamhaus.org as 127.0.0.3 22:19:17 postfix/postscreen[14390]: DNSBL rank 1 for [46.22.210.20]:58953 22:19:17 postfix/postscreen[14390]: DISCONNECT [46.22.210.20]:58953 Then just a second later another client on the same IP address 22:19:18 postfix/postscreen[14390]: CONNECT from [46.22.210.20]:53440 to [1.1.1.1]:25 22:19:22 postfix/postscreen[14390]: PASS NEW [46.22.210.20]:53440 22:19:22 postfix/smtpd[14403]: connect from construct.baladle.us[46.22.210.20] No, I do not use multiple DNS servers. Would be thankful for any further pointers. -- View this message in context: http://postfix.1071664.n5.nabble.com/postsceen-and-smtpd-recipients-restrictions-tp89110p89120.html Sent from the Postfix Users mailing list archive at Nabble.com.
