>> > Aug 26 21:21:35 [postfix/tlsproxy] CONNECT from
>> > [209.85.219.51]:41193
>> > Aug 26 21:21:36 [postfix/postscreen] NOQUEUE: reject: RCPT from
>> > [209.85.219.51]:41193: 450 4.3.2 Service currently unavailable;
>> > from=<mas...@gmail.com>, to=<mas...@masked.com>, proto=ESMTP,
>> > helo=<mail-oa0-f51.google.com>
>> > Aug 26 21:21:36 [postfix/tlsproxy] DISCONNECT [209.85.219.51]:41193
>> >
>> > The IP is whitelisted:
>> >
>> > http://dnswl.org/s?s=209.85.219.51
>>
>> Check again. Is the logging complete? Where are the dnsblog(8) log
>> entries? If this is in fact all the logging you got from this
>> connection, you're not getting your list.dnswl.org lookup.
>
> Good point. dnsblog will be silent ONLY when list.dnswl.org replies
> that the IP address is not listed (and perhaps when you send more
> queries than your dnswl.org subscription allows).
>
> Also the logging above is incomplete. You left out the CONNECT
> logging from postscreen (and perhaps more).
>
> For the complete postscreen/tlsproxy log:
>
> grep '\[209.85.219.51\]:41193' the-maillog-file

# grep '\[209.85.219.51\]:41193' -R /var/log/mail
Aug 26 21:21:29 [postfix/postscreen] CONNECT from
[209.85.219.51]:41193 to [MASKED]:25
Aug 26 21:21:35 [postfix/tlsproxy] CONNECT from [209.85.219.51]:41193
Aug 26 21:21:36 [postfix/postscreen] NOQUEUE: reject: RCPT from
[209.85.219.51]:41193: 450 4.3.2 Service currently unavailable;
from=<mas...@gmail.com>, to=<mas...@masked.com>, proto=ESMTP,
helo=<mail-oa0-f51.google.com>
Aug 26 21:21:36 [postfix/tlsproxy] DISCONNECT [209.85.219.51]:41193
Aug 26 21:21:36 [postfix/postscreen] HANGUP after 0.1 from
[209.85.219.51]:41193 in tests after SMTP handshake
Aug 26 21:21:36 [postfix/postscreen] PASS NEW [209.85.219.51]:41193
Aug 26 21:21:36 [postfix/postscreen] DISCONNECT [209.85.219.51]:41193

> for the dnsblog log
>
> grep 'Aug 26 21:21.*dnsblog.*209.85.219.51'

# grep '.*dnsblog.*209.85.219.51' -R /var/log/mail
#

I grep'ed the mail logs for dnsblog and got a huge number of these:

[postfix/postscreen] warning: psc_dnsbl_request: connect to
private/dnsblog service: No such file or directory

- Grant

Reply via email to