Hi,
On Thu, Oct 22, 2015 at 3:56 PM, Alex <[email protected]> wrote:
> Hi,
>
> On Thu, Oct 22, 2015 at 12:45 AM, Viktor Dukhovni
> <[email protected]> wrote:
>> On Wed, Oct 21, 2015 at 07:59:29PM -0400, Alex wrote:
>>
>>> Oct 21 19:56:10 mail01 postfix/smtpd[20778]: NOQUEUE: reject: RCPT
>>> from bx1.c4xf.com[66.150.190.74]: 554 5.7.1 Service unavailable;
>>> Unverified Client host [bx1.c4xf.com] blocked using
>>> mykey.dbl.dq.spamhaus.net;
>>> http://www.spamhaus.org/query/dbl?domain=c4xf.com;
>>> from=<[email protected]> to=<[email protected]> proto=ESMTP
>>> helo=<bx1.c4xf.com>
>>
>> This was blocked by smtpd(8) NOT postscreen. Perhaps surprisingly,
>> The smtpd(8) service has a different mechanism for obfuscating the
>> DNSBL service name.
>>
>> http://www.postfix.org/postconf.5.html#rbl_reply_maps
I think I figured out what I'm doing wrong but I don't know how to fix it.
I see for the postconf(5) entry for reject_rhsbl_client is:
reject_rhsbl_client rbl_domain=d.d.d.d
In my smtpd_recipient_restrictions I'm doing the following:
reject_rhsbl_reverse_client mykey.dbl.dq.spamhaus.net,
reject_rhsbl_sender mykey.dbl.dq.spamhaus.net,
reject_rhsbl_helo mykey.dbl.dq.spamhaus.net
without the "d.d.d.d".
Does the "d.d.d.d" represent the A record of the response code from
the DBL? Or the A record of the IP of which we are checking?
I don't understand how to map the restricts to their entry in the
rbl_reply_maps file.
Do I need to change how the restrictions are listed?
Thanks,
Alex
