The 521 SMTP reply only happens after checking the block lists. It's not being dropped immediately like the manually says it should be.
----- Mar 3 09:59:54 localhost postfix/postscreen[84375]: CONNECT from [85.54.217.239]:5089 to [xx.xx.xx.xx]:25 Mar 3 09:59:54 localhost postfix/postscreen[84375]: source=postscreen_access_list address=85.54.217.239 acl=permit_mynetworks Mar 3 09:59:54 localhost postfix/postscreen[84375]: match_hostaddr: postscreen_access_list: 85.54.217.239 ~? 127.0.0.0/8 Mar 3 09:59:54 localhost postfix/postscreen[84375]: match_hostaddr: postscreen_access_list: 85.54.217.239 ~? [::1]/128 Mar 3 09:59:54 localhost postfix/postscreen[84375]: match_hostaddr: postscreen_access_list: 85.54.217.239 ~? xx.xx.xx.xx Mar 3 09:59:54 localhost postfix/postscreen[84375]: match_list_match: 85.54.217.239: no match Mar 3 09:59:54 localhost postfix/postscreen[84375]: source=postscreen_access_list address=85.54.217.239 - no match Mar 3 09:59:54 localhost postfix/postscreen[84375]: psc_endpt_lookup_done: new + recent flags: NEW|PREGR_TODO|DNSBL_TODO Mar 3 09:59:54 localhost postfix/postscreen[84375]: match_hostaddr: postscreen_whitelist_interfaces: xx.xx.xx.xx ~? static:all(0,lock|utf8_request) Mar 3 09:59:54 localhost postfix/postscreen[84375]: > [85.54.217.239]:5089: 220-mail.example.com ESMTP Postfix (3.3.3) Mar 3 09:59:54 localhost postfix/postscreen[84375]: send attr rbl_domain = b.barracudacentral.org Mar 3 09:59:54 localhost postfix/postscreen[84375]: send attr client_address = 85.54.217.239 Mar 3 09:59:54 localhost postfix/postscreen[84375]: send attr label = 1 Mar 3 09:59:54 localhost postfix/postscreen[84375]: send attr rbl_domain = zen.spamhaus.org Mar 3 09:59:54 localhost postfix/postscreen[84375]: send attr client_address = 85.54.217.239 Mar 3 09:59:54 localhost postfix/postscreen[84375]: send attr label = 1 Mar 3 09:59:54 localhost postfix/postscreen[84375]: master_notify: status 1 Mar 3 09:59:54 localhost postfix/dnsblog[84377]: addr 85.54.217.239 listed by domain b.barracudacentral.org as 127.0.0.2 Mar 3 09:59:54 localhost postfix/postscreen[84375]: unknown_stream: wanted attribute: rbl_domain Mar 3 09:59:54 localhost postfix/postscreen[84375]: input attribute name: rbl_domain Mar 3 09:59:54 localhost postfix/postscreen[84375]: input attribute value: b.barracudacentral.org Mar 3 09:59:54 localhost postfix/postscreen[84375]: unknown_stream: wanted attribute: client_address Mar 3 09:59:54 localhost postfix/postscreen[84375]: input attribute name: client_address Mar 3 09:59:54 localhost postfix/postscreen[84375]: input attribute value: 85.54.217.239 Mar 3 09:59:54 localhost postfix/postscreen[84375]: unknown_stream: wanted attribute: label Mar 3 09:59:54 localhost postfix/postscreen[84375]: input attribute name: label Mar 3 09:59:54 localhost postfix/postscreen[84375]: input attribute value: 1 Mar 3 09:59:54 localhost postfix/postscreen[84375]: unknown_stream: wanted attribute: rbl_addr Mar 3 09:59:54 localhost postfix/postscreen[84375]: input attribute name: rbl_addr Mar 3 09:59:54 localhost postfix/postscreen[84375]: input attribute value: 127.0.0.2 Mar 3 09:59:54 localhost postfix/postscreen[84375]: unknown_stream: wanted attribute: ttl Mar 3 09:59:54 localhost postfix/postscreen[84375]: input attribute name: ttl Mar 3 09:59:54 localhost postfix/postscreen[84375]: input attribute value: 300 Mar 3 09:59:54 localhost postfix/postscreen[84375]: unknown_stream: wanted attribute: (list terminator) Mar 3 09:59:54 localhost postfix/postscreen[84375]: input attribute name: (end) Mar 3 09:59:54 localhost postfix/dnsblog[84376]: addr 85.54.217.239 listed by domain zen.spamhaus.org as 127.0.0.11 Mar 3 09:59:54 localhost postfix/dnsblog[84376]: addr 85.54.217.239 listed by domain zen.spamhaus.org as 127.0.0.4 Mar 3 09:59:54 localhost postfix/postscreen[84375]: unknown_stream: wanted attribute: rbl_domain Mar 3 09:59:54 localhost postfix/postscreen[84375]: input attribute name: rbl_domain Mar 3 09:59:54 localhost postfix/postscreen[84375]: input attribute value: zen.spamhaus.org Mar 3 09:59:54 localhost postfix/postscreen[84375]: unknown_stream: wanted attribute: client_address Mar 3 09:59:54 localhost postfix/postscreen[84375]: input attribute name: client_address Mar 3 09:59:54 localhost postfix/postscreen[84375]: input attribute value: 85.54.217.239 Mar 3 09:59:54 localhost postfix/postscreen[84375]: unknown_stream: wanted attribute: label Mar 3 09:59:54 localhost postfix/postscreen[84375]: input attribute name: label Mar 3 09:59:54 localhost postfix/postscreen[84375]: input attribute value: 1 Mar 3 09:59:54 localhost postfix/postscreen[84375]: unknown_stream: wanted attribute: rbl_addr Mar 3 09:59:54 localhost postfix/postscreen[84375]: input attribute name: rbl_addr Mar 3 09:59:54 localhost postfix/postscreen[84375]: input attribute value: 127.0.0.11 127.0.0.4 Mar 3 09:59:54 localhost postfix/postscreen[84375]: unknown_stream: wanted attribute: ttl Mar 3 09:59:54 localhost postfix/postscreen[84375]: input attribute name: ttl Mar 3 09:59:54 localhost postfix/postscreen[84375]: input attribute value: 900 Mar 3 09:59:54 localhost postfix/postscreen[84375]: unknown_stream: wanted attribute: (list terminator) Mar 3 09:59:54 localhost postfix/postscreen[84375]: input attribute name: (end) Mar 3 09:59:54 localhost postfix/postscreen[84375]: psc_early_dnsbl_event: notify [85.54.217.239]:5089 Mar 3 09:59:54 localhost postfix/postscreen[84375]: psc_dnsbl_retrieve: addr=85.54.217.239 score=2 ttl=300 Mar 3 10:00:00 localhost postfix/postscreen[84375]: PASS pregreet test [85.54.217.239]:5089 Mar 3 10:00:00 localhost postfix/postscreen[84375]: DNSBL rank 2 for [85.54.217.239]:5089 Mar 3 10:00:00 localhost postfix/postscreen[84375]: FAIL [85.54.217.239]:5089 Mar 3 10:00:00 localhost postfix/postscreen[84375]: DROP [85.54.217.239]:5089 Mar 3 10:00:00 localhost postfix/postscreen[84375]: flags for psc_conclude: NOFORWARD|NEW|PREGR_PASS|PREGR_TODO|DNSBL_FAIL|DNSBL_TODO|DNSBL_DONE Mar 3 10:00:00 localhost postfix/postscreen[84375]: > [85.54.217.239]:5089: 521 5.7.1 Service unavailable; client [85.54.217.239] blocked using b.barracudacentral.org Mar 3 10:00:00 localhost postfix/postscreen[84375]: DISCONNECT [85.54.217.239]:5089 Mar 3 10:00:00 localhost postfix/postscreen[84375]: connection closed fd 128 -- Sent from: http://postfix.1071664.n5.nabble.com/Postfix-Users-f2.html