How to correctly blacklist an IP for postscreen?

[Quanah Gibson-Mount]

I added an IP to the postscreen blacklist, but it still gets passed to 
SMTPD?

Jun 23 00:41:07 edge02e postfix/postscreen[3030]: CONNECT from 
[10.43.0.41]:20968 to [10.43.0.12]:25
Jun 23 00:41:07 edge02e postfix/postscreen[3030]: BLACKLISTED 
[10.43.0.41]:20968
Jun 23 00:41:07 edge02e postfix/postscreen[3030]: PASS OLD 
[10.43.0.41]:20968
Jun 23 00:41:07 edge02e postfix/smtpd[3052]: connect from 
ip-10-43-0-41.ec2.internal[10.43.0.41]
Jun 23 00:41:08 edge02e postfix/smtpd[3046]: NOQUEUE: filter: RCPT from 
ip-10-43-0-188.ec2.internal[10.43.0.188]: <postmas...@zimbra.com>: Sender 
address triggers FILTER smtp-amavis:[127.0.0.1]:10026; 
from=<postmas...@zimbra.com> to=<f...@hotmail.com> proto=ESMTP 
helo=<mail.zimbra.com>
Jun 23 00:41:08 edge02e postfix/smtpd[3046]: NOQUEUE: filter: RCPT from 
ip-10-43-0-188.ec2.internal[10.43.0.188]: <postmas...@zimbra.com>: Sender 
address triggers FILTER smtp-amavis:[127.0.0.1]:10024; 
from=<postmas...@zimbra.com> to=<f...@hotmail.com> proto=ESMTP 
helo=<mail.zimbra.com>
Jun 23 00:41:08 edge02e postfix/smtpd[3046]: NOQUEUE: reject: RCPT from 
ip-10-43-0-188.ec2.internal[10.43.0.188]: 554 5.7.1 <f...@hotmail.com>: 
Relay access denied; from=<postmas...@zimbra.com> to=<f...@hotmail.com> 
proto=ESMTP helo=<mail.zimbra.com>
Jun 23 00:41:08 edge02e postfix/smtpd[3048]: NOQUEUE: filter: RCPT from 
ip-10-43-0-188.ec2.internal[10.43.0.188]: <postmas...@zimbra.com.>: Sender 
address triggers FILTER smtp-amavis:[127.0.0.1]:10026; 
from=<postmas...@zimbra.com.> to=<f...@spessoa.com.br> proto=ESMTP 
helo=<mail.zimbra.com.>
Jun 23 00:41:08 edge02e postfix/smtpd[3048]: NOQUEUE: filter: RCPT from 
ip-10-43-0-188.ec2.internal[10.43.0.188]: <postmas...@zimbra.com.>: Sender 
address triggers FILTER smtp-amavis:[127.0.0.1]:10024; 
from=<postmas...@zimbra.com.> to=<f...@spessoa.com.br> proto=ESMTP 
helo=<mail.zimbra.com.>
Jun 23 00:41:08 edge02e postfix/smtpd[3048]: NOQUEUE: reject: RCPT from 
ip-10-43-0-188.ec2.internal[10.43.0.188]: 554 5.7.1 <f...@spessoa.com.br>: 
Relay access denied; from=<postmas...@zimbra.com.> to=<f...@spessoa.com.br> 
proto=ESMTP helo=<mail.zimbra.com.>
Jun 23 00:41:08 edge02e postfix/smtpd[3053]: NOQUEUE: filter: RCPT from 
ip-10-43-0-188.ec2.internal[10.43.0.188]: <postmas...@zimbra.com>: Sender 
address triggers FILTER smtp-amavis:[127.0.0.1]:10026; 
from=<postmas...@zimbra.com> to=<fccone...@hotmail.com> proto=ESMTP 
helo=<mail.zimbra.com>
Jun 23 00:41:08 edge02e postfix/smtpd[3053]: NOQUEUE: filter: RCPT from 
ip-10-43-0-188.ec2.internal[10.43.0.188]: <postmas...@zimbra.com>: Sender 
address triggers FILTER smtp-amavis:[127.0.0.1]:10024; 
from=<postmas...@zimbra.com> to=<fccone...@hotmail.com> proto=ESMTP 
helo=<mail.zimbra.com>
Jun 23 00:41:08 edge02e postfix/smtpd[3053]: NOQUEUE: reject: RCPT from 
ip-10-43-0-188.ec2.internal[10.43.0.188]: 554 5.7.1 
<fccone...@hotmail.com>: Relay access denied; from=<postmas...@zimbra.com> 
to=<fccone...@hotmail.com> proto=ESMTP helo=<mail.zimbra.com>


zimbra@edge02e:~$ postconf postscreen_access_list
postscreen_access_list = permit_mynetworks, 
cidr:/opt/zimbra/conf/postfix/postscreen_blacklist

zimbra@edge02e:~$ cat /opt/zimbra/conf/postfix/postscreen_blacklist
10.43.0.41 reject
10.43.0.188 reject


I also stop postfix, deleted the postscreen cache, and restarted, but it 
didn't work. :/  The logs above are from after doing that.


--Quanah

--

Quanah Gibson-Mount
Platform Architect
Manager, Systems Team
Zimbra, Inc.
--------------------
Zimbra ::  the leader in open source messaging and collaboration
A division of Synacor, Inc