Wietse Venema <wie...@porcupine.org> wrote:
> Michael Grimm:
>> this is postfix 3.8-20220325 (FreeBSD port postfix-current) on FreeBSD
>> 13.1-STABLE.
>>
>> I do find comparable entries in my logfiles that I do not understand,
>> honestly, like:
>
> The text from the remote client is encoded in octal, the way that
> C programs used to do such things.
>
> May we know what the postscreen settings are?
These are my settings in main.cf:
postscreen_access_list =
permit_mynetworks
cidr:/usr/local/etc/postfix/postscreen_access_list
This file has no entries, just '#' comment lines
postscreen_greet_action = enforce
postscreen_dnsbl_action = enforce
postscreen_dnsbl_threshold = 2
postscreen_dnsbl_sites =
zen.spamhaus.org
dnsbl-1.uceprotect.net
bl.mailspike.net
all.spamrats.com
list.dnswl.org*-10
Perhaps not needed, but:
KB-mail|root> postconf | grep postscreen
postscreen_access_list = permit_mynetworks
cidr:/usr/local/etc/postfix/postscreen_access_list
postscreen_allowlist_interfaces =
${postscreen_whitelist_interfaces?{$postscreen_whitelist_interfaces}:{static:all}}
postscreen_bare_newline_action = ignore
postscreen_bare_newline_enable = no
postscreen_bare_newline_ttl = 30d
postscreen_cache_cleanup_interval = 12h
postscreen_cache_map = btree:$data_directory/postscreen_cache
postscreen_cache_retention_time = 7d
postscreen_client_connection_count_limit = $smtpd_client_connection_count_limit
postscreen_command_count_limit = 20
postscreen_command_filter =
postscreen_command_time_limit = ${stress?{10}:{300}}s
postscreen_denylist_action =
${postscreen_blacklist_action?{$postscreen_blacklist_action}:{ignore}}
postscreen_disable_vrfy_command = $disable_vrfy_command
postscreen_discard_ehlo_keyword_address_maps =
$smtpd_discard_ehlo_keyword_address_maps
postscreen_discard_ehlo_keywords = $smtpd_discard_ehlo_keywords
postscreen_dnsbl_action = enforce
postscreen_dnsbl_allowlist_threshold =
${postscreen_dnsbl_whitelist_threshold?{$postscreen_dnsbl_whitelist_threshold}:{0}}
postscreen_dnsbl_max_ttl = ${postscreen_dnsbl_ttl?{$postscreen_dnsbl_ttl}:{1}}h
postscreen_dnsbl_min_ttl = 60s
postscreen_dnsbl_reply_map =
postscreen_dnsbl_sites = zen.spamhaus.org dnsbl-1.uceprotect.net
bl.mailspike.net all.spamrats.com list.dnswl.org*-10
postscreen_dnsbl_threshold = 2
postscreen_dnsbl_timeout = 10s
postscreen_enforce_tls = $smtpd_enforce_tls
postscreen_expansion_filter = $smtpd_expansion_filter
postscreen_forbidden_commands = $smtpd_forbidden_commands
postscreen_greet_action = enforce
postscreen_greet_banner = $smtpd_banner
postscreen_greet_ttl = 1d
postscreen_greet_wait = ${stress?{2}:{6}}s
postscreen_helo_required = $smtpd_helo_required
postscreen_non_smtp_command_action = drop
postscreen_non_smtp_command_enable = no
postscreen_non_smtp_command_ttl = 30d
postscreen_pipelining_action = enforce
postscreen_pipelining_enable = no
postscreen_pipelining_ttl = 30d
postscreen_post_queue_limit = $default_process_limit
postscreen_pre_queue_limit = $default_process_limit
postscreen_reject_footer = $smtpd_reject_footer
postscreen_reject_footer_maps = $smtpd_reject_footer_maps
postscreen_tls_security_level = $smtpd_tls_security_level
postscreen_upstream_proxy_protocol =
postscreen_upstream_proxy_timeout = 5s
postscreen_use_tls = $smtpd_use_tls
postscreen_watchdog_timeout = 10s
proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps
$virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains
$relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps
$recipient_canonical_maps $relocated_maps $transport_maps $mynetworks
$smtpd_sender_login_maps $sender_bcc_maps $recipient_bcc_maps
$smtp_generic_maps $lmtp_generic_maps $alias_maps $smtpd_client_restrictions
$smtpd_helo_restrictions $smtpd_sender_restrictions $smtpd_relay_restrictions
$smtpd_recipient_restrictions
$address_verify_sender_dependent_default_transport_maps
$address_verify_sender_dependent_relayhost_maps $address_verify_transport_maps
$fallback_transport_maps $lmtp_discard_lhlo_keyword_address_maps
$lmtp_pix_workaround_maps $lmtp_sasl_password_maps $lmtp_tls_policy_maps
$mailbox_command_maps $mailbox_transport_maps
$postscreen_discard_ehlo_keyword_address_maps $rbl_reply_maps
$sender_dependent_default_transport_maps $sender_dependent_relayhost_maps
$smtp_discard_ehlo_keyword_address_maps $smtp_pix_workaround_maps
$smtp_sasl_password_maps $smtp_tls_policy_maps
$smtpd_discard_ehlo_keyword_address_maps $smtpd_milter_maps $virtual_gid_maps
$virtual_uid_maps $local_login_sender_maps $postscreen_reject_footer_maps
$smtpd_reject_footer_maps $tls_server_sni_maps $tlsproxy_client_policy_maps
$default_delivery_status_filter $lmtp_delivery_status_filter
$lmtp_dns_reply_filter $lmtp_reply_filter $local_delivery_status_filter
$pipe_delivery_status_filter $postscreen_command_filter
$smtp_delivery_status_filter $smtp_dns_reply_filter $smtp_reply_filter
$smtpd_command_filter $smtpd_dns_reply_filter $virtual_delivery_status_filter
$body_checks $header_checks $lmtp_body_checks $lmtp_header_checks
$lmtp_mime_header_checks $lmtp_nested_header_checks $milter_header_checks
$mime_header_checks $nested_header_checks $smtp_body_checks $smtp_header_checks
$smtp_mime_header_checks $smtp_nested_header_checks
proxy_write_maps = $smtp_sasl_auth_cache_name $lmtp_sasl_auth_cache_name
$address_verify_map $postscreen_cache_map
Regards,
Michael
