On 2022-08-07 06:08, PGNet Dev wrote:
For reference, a couple of samples of the blocked emails are:
NOQUEUE: reject: RCPT from o4.email.wetransfer.com[192.254.123.89]:
554 5.7.1 Service
I would add to the useful information below that neither sample is in
fact listed in Zen at this time.
YOU CANNOT USE DNSBL SERVICES THROUGH YOUR ISP RESOLVER.
YOU CANNOT USE DNSBL SERVICES THROUGH OPEN RESOLVERS (Google, et c.)
You must run a local resolver (such as BIND named(8), unbound(8) or
whatever) for your MTA to look up DNSBL records.
Show us the complete result of this command on your Postfix machine:
dig 2.0.0.127.zen.spamhaus.org. any
This will probably show us the "forbidden access" return codes. In
addition it will show the nameserver IP address you are using.
Zen list is an amalgam of XBL, PBL, SBL, SBLCSS & PBL blocklists
Data can be transient or delisted ... policy depends on the specific
list.
What were the return codes for the rejections above -- at the time of
rejection?
When did you *check* listings, relative to the rejection time stamps?
What is your 'postscreen_dnsbl_threshold' setting, and wow are you
scoring the individual spamhaus return-code ranges?
--
http://rob0.nodns4.us/
