On 2024-06-22 at 06:55:32 UTC-0400 (Sat, 22 Jun 2024 05:55:32 -0500)
Cody Millard via Postfix-users <cmillard@email.broker>
is rumored to have said:

Hello list.

I included Spamhaus XBL in client restrictions for my server. An error is supplied to the individual/bot that is trying to connect that looks like the follow:

Transcript of session follows.

Out: 554 5.7.1 Service unavailable; Client host [57.152.56.248] blocked using
     <DQS_KEY>.xbl.dq.spamhaus.net; Listed by XBL, see
     https://check.spamhaus.org/query/ip/57.152.56.248
 In:  ???
 Out: 500 5.5.2 Error: bad UTF-8 syntax
 In:
 Out: 500 5.5.2 Error: bad UTF-8 syntax
 In:  ?
 Out: 221 2.7.0 Error: I can break rules, too. Goodbye.

Incidentally, that looks like a client trying to connect using TLS in 'wrapper mode' instead of using the STARTTLS command, so it is extremely unlikely that the client understood the error message as text (i.e. it likely saw it as a bad TLS handshake.)

For other details, see the local mail logfile

You can see my dqs key in the err

Yes. That's why rbl_reply_maps and postscreen_dnsbl_reply_map [sic] exists. 'man 5 postconf' has the details for both (as it does for so very much...)



--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo@toad.social and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to