He is multiple times listed. See : http://multirbl.valli.org/lookup/46.22.210.2.html Spamhaus ( listed in DBL Advisory. ) ( aerial.astogle.us.dbl.spamhaus.org )
The remote server probley sends "listed at zen.spamhaus.org" but is using DBL also. https://www.spamhaus.org/dbl/ Greetz, Louis > -----Oorspronkelijk bericht----- > Van: wie...@porcupine.org [mailto:owner-postfix-us...@postfix.org] Namens > wie...@porcupine.org > Verzonden: maandag 27 februari 2017 13:07 > Aan: Postfix users > Onderwerp: Re: postsceen and smtpd_recipients_restrictions > > Den1: > > Wietse Venema wrote > > > Den1: > > >> 22:19:13 postfix/postscreen[14390]: CONNECT from [46.22.210.20]:58953 > to > > >> [1.1.1.1]:25 > > >> 22:19:13 postfix/dnsblog[14391]: addr 46.22.210.20 listed by domain > > >> zen.spamhaus.org as 127.0.0.3 > > >> 22:19:17 postfix/postscreen[14390]: DNSBL rank 1 for > [46.22.210.20]:58953 > > >> 22:19:17 postfix/postscreen[14390]: DISCONNECT [46.22.210.20]:58953 > > > > > > The client is listed at zen.spamhaus.org. The client does not talk to > > > the Postfix SMTP daemon (smtpd). > > > > > >> 22:19:18 postfix/postscreen[14390]: CONNECT from [46.22.210.20]:53440 > to > > >> [1.1.1.1]:25 > > >> 22:19:22 postfix/postscreen[14390]: PASS NEW [46.22.210.20]:53440 > > >> 22:19:22 postfix/smtpd[14403]: connect from > > >> construct.baladle.us[46.22.210.20] > > > > > > The client is NOT LISTED at zen.spamhaus.org, or more likely, you > > > use multiple DNS servers, some of which get service from spamhaus.org, > > > and some of which don't get service from spamhaus.org. > > > > > > Wietse > > > > Thank you so much for your directions and guidance. I really do > appreciate. > > That's a nice way of saying you did not understand 99% of the reply. > > > Although I am getting a bit lost. Is it possible for different clients > to > > have the same IP address in such a short period of time as per my logs > > posted? > > zen.spamhaus.org provides a service that depends the DNS client IP > address. Low-volume DNS clients get free service, but high-volume > DNS clients have to pay for a subscription. > > For example, if you use the resolver at a big ISP, or a public > service like 8.8.8.8 or 4.4.4.4, then zen.spamhaus.org won't work > well for you, if at all. > > Wietse
