Since I enabled postscreen (with soft_bounce=yes in master.cf) I was
getting logs of this form:

Apr  9 01:08:12 mta1 postfix/postscreen[18326]:
  NOQUEUE: reject: RCPT from [2607:f8b0:4002:c05::22d]:32999:
  450 4.3.2 Service currently unavailable;
  from=<redac...@gmail.com>, to=<REDACTED>,
  proto=ESMTP, helo=<mail-yw0-x22d.google.com>

linefeeds added by me for readability.

gmail would just keep trying a half hour later and mail never gets
delivered.

rfc3463 isn't very helpful:

  X.3.2   System not accepting network messages

    The host on which the mailbox is resident is not accepting
    messages.  Examples of such conditions include an immanent
    shutdown, excessive load, or system maintenance.  This is
    useful for both permanent and permanent transient errors.

I have lines of the form:

  main.cf:
  postscreen_access_list =
      cidr:$config_directory/postscreen_access
      hash:$config_directory/postscreen_reject

  postscreen_access:
  #  google mail servers
  2607:f8b0:4002:c00::/60         permit
  [... other google server blocks ...]

This is a workaround that shouldn't be needed.

Any idea what the cause of this is?  So far no legit mail except gmail
gets caught here.

Curtis

Reply via email to