ciao a tutti ;)
i'm finally learning postscreen (..ahh.. find the time) and i'm trying
to fine tune the entire system.. and myself :)
I was wondering if the following behaviour is due to a my-setup missing
parameter or to a my mistake/misunderstanding in reading the manual ..
before, some details:
#######################################################
- debian squeeze
- postfix 2.8.2
# postconf -n | egrep postscreen
postscreen_bare_newline_action = ignore
postscreen_bare_newline_enable = yes
postscreen_greet_action = enforce
postscreen_greet_banner = pre-greet____please-wait
postscreen_greet_wait = ${stress?2}${stress:8}s
postscreen_non_smtp_command_action = drop
postscreen_non_smtp_command_enable = yes
postscreen_pipelining_action = enforce
postscreen_pipelining_enable = yes
#######################################################
now, logs lines of what i mean:
-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
Apr 8 03:28:46 mx20 postfix/postscreen[16419]: CONNECT from
[190.135.213.150]:18780
Apr 8 03:28:55 mx20 postfix/postscreen[16419]: NOQUEUE: reject: RCPT
from [190.135.213.150]:18780: 450 4.3.2 Service currently unavailable;
from=<[email protected]>, to=<[email protected]>, proto=ESMTP,
helo=<anteldata.net.uy>
Apr 8 03:28:55 mx20 postfix/postscreen[16419]: HANGUP after 1.6 from
[190.135.213.150]:18780 in tests after SMTP handshake
Apr 8 03:28:55 mx20 postfix/postscreen[16419]: PASS NEW
[190.135.213.150]:18780
Apr 8 03:28:55 mx20 postfix/postscreen[16419]: DISCONNECT
[190.135.213.150]:18780
-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
PASS NEW ?? ..infact a second later:
-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
Apr 8 03:29:37 mx20 postfix/postscreen[16419]: CONNECT from
[190.135.213.150]:19436
Apr 8 03:29:37 mx20 postfix/postscreen[16419]: PASS OLD
[190.135.213.150]:19436
-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
If the client didn't close properly the connection, is the intended
behaviour to 'PASS NEW' that client ? Odd, i expected postscreen to
repeat tests the next time the client connects.
Thank for your time ..i love postfix but, maybe, my english doesn't love
me so much to make me understand the *carefully written* documentation ;-)
bye..
Amedeo Rinaldo
--------------
Una volta eliminato l'impossibile, quello che resta, per improbabile che
sia, deve essere la verità (Sherlock Holmes)
