On Wed, Dec 19, 2018 at 02:00:34PM +0100, Stefan Bauer wrote:
> Dec 19 13:04:36 mx1 postfix/postscreen[4770]: CONNECT from
> [209.85.166.196]:52168 to [public-ip]:25
> Dec 19 13:04:42 mx1 postfix/dnsblog[4774]: addr 209.85.166.196 listed by
> domain dnsbl.sorbs.net as 127.0.0.6
> Dec 19 13:04:42 mx1 postfix/postscreen[4770]: PASS NEW
> [209.85.166.196]:52168
> Dec 19 13:04:42 mx1 postfix/smtpd[4778]: connect from
> mail-it1-f196.google.com[209.85.166.196]
>
> why did google pass postscreen even though its listed in one of the RBL?
>
> postscreen_dnsbl_sites = zen.spamhaus.org*2 bl.spamcop.net*1
> b.barracudacentral.org*1 dnsbl.sorbs.net*1
> postscreen_blacklist_action = drop
> postscreen_dnsbl_action = enforce
>
> Am i missing something obvious?
What is the minimum weight you require for an RBL block? The sorbs
RBL has weight 1, perhaps you require 2 or more.
http://www.postfix.org/postconf.5.html#postscreen_dnsbl_threshold
You've not posted your complete "postconf -n" output, so it is all
conjectural.
--
Viktor.
